The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Feb 4, 2020 |
| Centos_linux | — | Upgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade npm | Oct 20, 2020 | Feb 4, 2020 |
| Debian | — | Upgrade node-dot-prop | Jul 30, 2024 | Feb 4, 2020 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade nodejs-nodemonUpgrade npmUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-packaging | Oct 21, 2020 | Jan 28, 2020 |
| Redhat_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-debugsource | Oct 20, 2020 | Feb 4, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Feb 4, 2020 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Feb 4, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub