CVE-2020-8116 PUBLISHED

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

EPSS 0.76% · 73.3th percentile

Risk Scores

EPSS Score
0.76%
73.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSnode-dot-prop0, 4.1.1-1

Timeline

References

Open in Interactive Console →