Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-8141
8.8
HIGHCVSS v3
Severity scale
010
Description
The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.
dot
NPMConcise and fast javascript templating compatible with nodejs and other javascript environments
NPMConcise and fast javascript templating compatible with nodejs and other javascript environments= 1.1.2, < 1.1.3OSV