Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/dojo@1.13.7
purl pkg:npm/dojo@1.13.7
Next non-vulnerable version 1.17.0
Latest non-vulnerable version 2.0.0-alpha.5
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-zdmu-4wde-3ufc
Aliases:
CVE-2021-23450
GHSA-m8gw-hjpr-rjv7
Prototype Pollution in dojo
1.17.0
Affected by 0 other vulnerabilities.
2.0.0-alpha.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-yjbb-bqwz-tfd9 Prototype pollution in dojo CVE-2020-5258
GHSA-jxfh-8wgv-vfr2

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T15:07:18.478915+00:00 GitLab Importer Fixing VCID-yjbb-bqwz-tfd9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/dojo/CVE-2020-5258.yml 38.6.0
2026-06-12T17:54:30.286432+00:00 GitLab Importer Affected by VCID-zdmu-4wde-3ufc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/dojo/CVE-2021-23450.yml 38.6.0
2026-06-12T08:01:58.677355+00:00 GithubOSV Importer Fixing VCID-yjbb-bqwz-tfd9 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/03/GHSA-jxfh-8wgv-vfr2/GHSA-jxfh-8wgv-vfr2.json 38.6.0
2026-06-11T20:25:57.237356+00:00 GHSA Importer Fixing VCID-yjbb-bqwz-tfd9 https://github.com/advisories/GHSA-jxfh-8wgv-vfr2 38.6.0