Skip to content
OpenAdvisories
High DLA-2139-1 2 CVEs

dojo - security update

Published Mar 11, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 dojo 1.10.2+dfsg-1+deb8u3

Vulnerabilities 2

  • High 7.7
    CVE-2020-5258

    Prototype pollution in dojo

    In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulat…

    dojo dojo dojo dojo Debian Ubuntu npm
  • High 7.7
    CVE-2020-5259

    Prototype Pollution in Dojox

    In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates…

    dojo dojox dojo dojo Debian Ubuntu npm