DO
Product
dottie.js
by mickhansen · last CVE Feb 26, 2026
1
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add dottie.js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27837
9.8
0%
Feb 26
Dottie vulnerable to prototype pollution bypass via non-first path segments in set() and transform()
Affected: >= 2.0.4, < 2.0.7
Showing 1