critical9.8
CVE-2020-7717
Prototype Pollution in dot-notes
Impact
All versions of package dot-notes up to and including version 3.2.0 are vulnerable to Prototype Pollution via the create function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | dot-notes | <= 3.2.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dot-Notes Project | Dot-Notes | All versions |