VulnSocial

CVE-2023-26132General(dottie_project / dottie)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch dottie_project dottie systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable in the /dottie.js file.

dottie_project CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-1321

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • dottie

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
dottie_project
Products
dottie

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-26: 1Patch / Workaround · 2026-02-26: 1Technical Details · 2026-02-26: 102-26
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVE@CVEnew
    General

    CVE-2026-27837 Dottie provides nested object access and manipulation in JavaScript. Versions 2.0.4 through 2.0.6 contain an incomplete fix for CVE-2023-26132. The prototype pollutio… https://www.cve.org/CVERecord?id=CVE-2026-27837

    Post summary

    The post references CVE‑2026‑27837, noting that Dottie allows nested object access and manipulation in JavaScript, and mentions an incomplete fix for a related CVE, but provides no PoC, exploit, or active exploitation details.

    00000173
    56.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appdottie_projectdottie-node.js-

Explore more

Back to dashboarddottie_project CVEsdottie vulnerabilities