Linuxfoundation Dojo vulnerabilities

2 CVEs affecting Linuxfoundation Dojo, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-23450, published 2021-12-17.

More from Linuxfoundation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-23450, published 2021-12-17. Critical severity, CVSS 9.8. EPSS: 30.4% chance of exploitation in the next 30 days. All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
• CVE-2020-5258, published 2020-03-10. High severity, CVSS 7.7. EPSS: 4% chance of exploitation in the next 30 days. In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language…