CVE-2021-25912
1 advisory.
npm/dotty CVE-2021-25912: critical 9.8, EPSS 3.34%
Prototype pollution in dotty
Action: Upgrade dotty to 0.1.1 or later.
npm i dotty@0.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.1 | - |
Fixed versions
| 0.1.1 |
Sources
- osv: GHSA-f5c9-x9j6-87qp
- https://nvd.nist.gov/vuln/detail/CVE-2021-25912
- https://github.com/deoxxa/dotty/commit/cd997d37917186c131be71501a698803f2b7ebdb
- https://www.npmjs.com/package/dotty
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25912
CVE-2021-25912 · published · modified · JSON