Dot Project Dot — known CVE vulnerabilities

Every CVE whose affected-product data names Dot Project Dot, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-8141 — CVSS 8.8 (high): The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template…
• CVE-2020-7639 — CVSS 5.3 (medium): eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying…