CVE-2023-26106
7.5HIGHAll versions of the package dot-lens are vulnerable to Prototype Pollution via the set() function in index.js file.
Veröffentlicht: 3/6/2023Aktualisiert: 3/5/2025
Beschreibung
All versions of the package dot-lens are vulnerable to Prototype Pollution via the set() function in index.js file.
KI-AnalyseKI-gestützt
Betroffene Produkte
dot-lens_projectdot-lens
Referenzen
- https://github.com/jb55/dot-lens/blob/465ef2088e4065b7be1c4372eedd2215c3820bc4/index.js%23L70Broken Link
- https://security.snyk.io/vuln/SNYK-JS-DOTLENS-3227646ExploitThird Party Advisory
- https://github.com/jb55/dot-lens/blob/465ef2088e4065b7be1c4372eedd2215c3820bc4/index.js%23L70Broken Link
- https://security.snyk.io/vuln/SNYK-JS-DOTLENS-3227646ExploitThird Party Advisory