← Back

Dojo

dojo

Vendor: Linuxfoundation • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-23450
3Debian
LinuxfoundationOracle
5Communications Policy Management
Debian LinuxDojo+2 more
Jun 17, 2026
Dec 17, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
CVE-2020-5258
3Debian
LinuxfoundationOracle
10Communications Application Session Controller
Communications Policy ManagementCommunications Pricing Design Center+7 more
Jun 17, 2026
Mar 10, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes,...Show more
In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or pollute, a JavaScript application object prototype of the base object by injecting other values. This has been patched in versions 1.12.8, 1.13.7, 1.14.6, 1.15.3 and 1.16.2Show less