Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2020-8116

nodejs-dot-prop: prototype pollution

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

CVSS 3.1 · 7.3 High EPSS 3.1% KEV · Not listed
Vendors
Dot-prop Project Redhat
Products
Dot-prop Enterprise Linux Rhel Eus and 1 more