Every CVE whose affected-product data names Dotty Project Dotty, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2021-25912 — CVSS 9.8 (critical): Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service and may lead to…
CVE-2021-23624 — CVSS 5.6 (medium): This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided…