Advisory Weakness Curation

Command Injection in dot All versions of dot are vulnerable to Command Injection. The template compilation may execute arbitrary commands if an attacker can inject code in the template or if a Prototype Pollution-like vulnerability can be exploited to alter an Object's prototype.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in dot.