~ / search / GHSA-rmhg-2cvv-q7vx

GHSA-rmhg-2cvv-q7vx

dot-lens vulnerable to Prototype Pollution

Source: GitHub Advisory Database (reviewed) High CVE-2023-26106

Packages

EcosystemPackageAffectedFixed in
npm dot-lens <= 1.2.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of the package dot-lens are vulnerable to Prototype Pollution via the `set()` function in `index.js` file.

References

External links from the advisory. They lead to third-party sites.