Skip to content
OpenAdvisories

Package · npm

dojo

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-23450 EPSS 30%

    Prototype Pollution

    All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

    dojo dojo dojo Debian Ubuntu npm
  • High 7.7
    CVE-2020-5258

    Prototype pollution in dojo

    In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulat…

    dojo dojo dojo dojo Debian Ubuntu npm