Every CVE whose affected-product data names Dottie Project Dottie, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2023-26132 — CVSS 7.5 (high): Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and…
CVE-2026-27837 — CVSS 6.3 (medium): Dottie provides nested object access and manipulation in JavaScript. Versions 2.0.4 through 2.0.6 contain an incomplete fix for…