{"id":"EUVD-2021-1218","enisaUuid":"ef4cf1fc-5901-3fdc-8ae8-fa739ed1f352","description":"eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function \u0027set\u0027 could be tricked into adding or modifying properties of \u0027Object.prototype\u0027 using a \u0027__proto__\u0027 payload.","datePublished":"Apr 6, 2020, 12:48:14 PM","dateUpdated":"Oct 8, 2026, 9:03:12 PM","baseScore":null,"references":"https://snyk.io/vuln/SNYK-JS-EIVIFJDOT-564435\nhttps://github.com/eivindfjeldstad/dot/commit/774e4b0c97ca35d2ae40df2cd14428d37dd07a0b\n","aliases":"CVE-2020-7639\nGHSA-wfwq-xc57-fq7v\n","assigner":"snyk","epss":1.1,"enisaIdProduct":[{"id":"046bbdca-d9bf-32dd-98d9-11480b982057","product":{"name":"@eivifj/dot","vendor":{"name":"n/a"}},"product_version":"All versions below 1.0.3"}],"enisaIdVendor":[{"id":"3b167219-6b84-3f34-9967-1f59b802e0e9","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"20310dc8-fba7-3919-90bb-1a039df4e7b9","vulnerability":{"id":"CVE-2020-7639","description":"eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function \u0027set\u0027 could be tricked into adding or modifying properties of \u0027Object.prototype\u0027 using a \u0027__proto__\u0027 payload.","datePublished":"Apr 6, 2020, 12:48:14 PM","dateUpdated":"Oct 8, 2026, 9:03:12 PM","status":"PUBLISHED","baseScore":null,"references":"https://snyk.io/vuln/SNYK-JS-EIVIFJDOT-564435\nhttps://github.com/eivindfjeldstad/dot/commit/774e4b0c97ca35d2ae40df2cd14428d37dd07a0b\n","enisa_id":"EUVD-2021-1218\n","assigner":"snyk","epss":1.1,"dataProcessed":"Oct 28, 2026, 7:19:13 AM","vulnerabilityProduct":[{"id":"e6336dbc-6a12-341f-81a8-f35f6e09d377","product":{"name":"@eivifj/dot","vendor":{"name":"n/a"}},"product_version":"All versions below 1.0.3"}],"vulnerabilityVendor":[{"id":"c76a2e04-c6a5-35d0-9c8a-597e7ff76ef2","vendor":{"name":"n/a"}}]}},{"id":"bbb2724f-16fe-32ba-b013-f29cc0dd4578","vulnerability":{"id":"GHSA-wfwq-xc57-fq7v","description":"eivindfjeldstad-dot contains prototype pollution vulnerability","datePublished":"May 25, 2021, 3:59:14 PM","dateUpdated":"Jul 13, 2023, 5:59:31 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2020-7639\nhttps://github.com/eivindfjeldstad/dot/commit/774e4b0c97ca35d2ae40df2cd14428d37dd07a0b\nhttps://github.com/eivindfjeldstad/dot\nhttps://snyk.io/vuln/SNYK-JS-EIVIFJDOT-564435\n","enisa_id":"EUVD-2021-1218\n","aliases":"CVE-2020-7639\nGHSA-wfwq-xc57-fq7v\n","epss":0.0,"dataProcessed":"Apr 21, 2026, 4:03:33 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}