Skip to content
OpenAdvisories

Product · ntharim

dot-access

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-107701

    dot-access through 1.0.0 Prototype Pollution via set() path argument

    dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set(). Attackers controlling the path, such as through user-supplied field names, can use __proto__ se…

    ntharim dot-access