NPM
Releases25
Frequency4 months 3 weeks
Last Release
Concise and fast javascript templating compatible with nodejs and other javascript environments
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| = 1.1.2, < 1.1.3 | 8.8 HIGH | 6.5 MEDIUM | ||
The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype. | ||||