CVE-2020-8141CWE-94

CVE-2020-8141: vulnerability in dot

Published · Updated

Follow this CVE+ Monitor dot+ Monitor node-dot

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.2%
The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.
Affected products
n/a · dot