PatchTheCVEdotty vulnerabilities and fixes
Recent CVEs affecting dotty, with upgrade or downgrade steps. 2 tracked.
dotty has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-11-03. Highest priority: CVE-2021-25912 (score 67/100).
- CVE-2021-25912 CRITICAL 9.8 UPGRADE Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial o
- CVE-2021-23624 MEDIUM 5.6 UPGRADE This affects the package dotty before 0.1.2
FAQ
How do I fix dotty vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dotty being exploited right now?
None of the tracked dotty CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dotty CVE should I patch first?
CVE-2021-25912 currently ranks highest (67/100): Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial o.