VYPR

Dot Prop

by Dot Prop Project

Source repositories

CVEs (1)

  • CVE-2020-8116HigFeb 4, 2020
    risk 0.41cvss 7.3epss 0.03

    Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.