CVE-2023-26132
Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current v...
Original description
The description as published by the source.
Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable in the /dottie.js file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-26132 node-dottie Fixed in: 2.0.2-1+deb11u1
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web security.snyk.io