tocsin

Debian/node-dottie: high 7.5

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable in the /dottie.js file.

Action: Upgrade node-dottie to 2.0.6+~2.0.5-1 or later.

Affected

introducedfixedlast affected
02.0.6+~2.0.5-1-

Fixed versions

2.0.6+~2.0.5-1

Sources

published · modified · JSON