Skip to content
OpenAdvisories

Package · Debian

node-dot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2020-8141

    Improper Control of Generation of Code in doT

    The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.

    dot node-dot Debian npm