Dottie Project Dottie
2 CVEs affecting Dottie Project Dottie. Latest disclosed: 2026-02-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-26132 | High | 7.5 | 2023-06-10 | Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable i… |
CVE-2026-27837 | Medium | 6.3 | 2026-02-26 | Dottie provides nested object access and manipulation in JavaScript. Versions 2.0.4 through 2.0.6 contain an incomplete fix for CVE-2023-26132. The prototype p… |