Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/dot-prop@4.2.1
purl pkg:npm/dot-prop@4.2.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-4b6t-hfzu-7uf5 dot-prop Prototype Pollution vulnerability Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects. CVE-2020-8116
GHSA-ff7x-qrg7-qggm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T12:36:23.316938+00:00 GitLab Importer Fixing VCID-4b6t-hfzu-7uf5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/dot-prop/CVE-2020-8116.yml 38.0.0
2026-04-01T15:58:20.909640+00:00 GHSA Importer Fixing VCID-4b6t-hfzu-7uf5 https://github.com/advisories/GHSA-ff7x-qrg7-qggm 38.0.0
2026-04-01T13:00:22.385841+00:00 GithubOSV Importer Fixing VCID-4b6t-hfzu-7uf5 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/07/GHSA-ff7x-qrg7-qggm/GHSA-ff7x-qrg7-qggm.json 38.0.0