CVE-2020-7639: Dot Project Dot

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

Affected products

• Dot Project Dot: before 1.0.3 (fixed in 1.0.3)

Published 2020-04-06. Last modified 2026-10-08.