GHSA-rmhg-2cvv-q7vxHighCVSS 7.5

dot-lens vulnerable to Prototype Pollution

Published
March 6, 2023
Last Modified
March 13, 2023

🔗 CVE IDs covered (1)

CVE-2023-26106 →

📋 Description

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set() function in index.js file.

🎯 Affected products1

  • npm/dot-lens:<= 1.2.3

🔗 References (4)