Dot-Prop Project: Security Vulnerabilities
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.
CVSS Score
7.3
EPSS Score
0.001
Published
2020-02-04