CVE-2026-107701 in dot-access
요약
\~에 의해 MITRE • 2026. 10. 08.
dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set(). Attackers controlling the path, such as through user-supplied field names, can use __proto__ segments to inject properties into all objects, altering authorization flags and option defaults or crashing the process.
If you want to get best quality of vulnerability data, you may have to visit VulDB.