HIGH7.5npm
GHSA-4gxf-g5gf-22h4· CVE-2023-26132dottie vulnerable to Prototype Pollution
Modified: 2/26/2026
package
npm/dottie
pkg:npm/dottie
MEDIUM6.3npm
GHSA-r5mx-6wc6-7h9w· CVE-2026-27837dottie is vulnerable to Prototype Pollution bypass via non-first path segments in set() and transform()
Modified: 2/26/2026