{"action":"Upgrade dottie to 2.0.4 or later.","affected":[{"fixed":"2.0.4","introduced":"0"}],"component":"dottie","cve_ids":["CVE-2023-26132"],"ecosystem":"npm","epss":0.01062,"exploited":false,"fixed_versions":["2.0.4"],"ghsa_id":"GHSA-4gxf-g5gf-22h4","id":"tcs_01M5KF0F23MNKG8PX8J7CDAT57","modified_at":"2026-02-26T02:59:02.336607Z","published_at":"2023-06-10T06:30:25Z","references":["https://osv.dev/vulnerability/GHSA-4gxf-g5gf-22h4","https://nvd.nist.gov/vuln/detail/CVE-2023-26132","https://github.com/mickhansen/dottie.js/commit/7d3aee1c9c3c842720506e131de7e181e5c8db68","https://github.com/mickhansen/dottie.js","https://github.com/mickhansen/dottie.js/blob/b48e22714aae4489ea6276452f22cc61980ba5a4/dottie.js#L107","https://security.snyk.io/vuln/SNYK-JS-DOTTIE-3332763"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4gxf-g5gf-22h4","url":"https://osv.dev/vulnerability/GHSA-4gxf-g5gf-22h4"}],"summary":"dottie vulnerable to Prototype Pollution"}