Headline
GHSA-rmhg-2cvv-q7vx: dot-lens vulnerable to Prototype Pollution
All versions of the package dot-lens are vulnerable to Prototype Pollution via the set()
function in index.js
file.
dot-lens vulnerable to Prototype Pollution
High severity GitHub Reviewed Published Mar 6, 2023 to the GitHub Advisory Database • Updated Mar 7, 2023
Related news
CVE-2023-26106
All versions of the package dot-lens are vulnerable to Prototype Pollution via the set() function in index.js file.