CVE-2021-25912: Dotty Project Dotty

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service and may lead to remote code execution.

Affected products

• Dotty Project Dotty: from 0.0.1, up to and including 0.1.0

Published 2021-02-02. Last modified 2026-06-17.