CVE-2023-26132

PoC —

CVSS 3.1

7.5 high

EPSS

1%p63

Published

Jun 10, 2023 (Jun 10, 2023)

Modified

Jun 17, 2026

Description

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable in the /dottie.js file.

Vendors: dottie project
Products: dottie
Weakness: CWE-1321
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.