Advisory Weakness Curation

dot-prop Prototype Pollution vulnerability Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

Direct Request (Forced Browsing) Prototype pollution vulnerability in dot-prop npm package version allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.