`dottie`

Ecosystem:
npm

Package URL:
pkg:npm/dottie

Total PRs:
111 Dependabot PRs

Latest PR:
about 13 hours ago

Unique Repositories:
98 repositories

Unique Repos (30 days):
22 repositories

Security Advisories

dottie is vulnerable to Prototype Pollution bypass via non-first path segments in set() and transform()

GHSA-r5mx-6wc6-7h9w CVE-2026-27837 MODERATE published 13 days ago • updated 6 days ago

### Summary dottie versions 2.0.4 through 2.0.6 contain an incomplete fix for CVE-2023-26132. The prototype pollution guard introduced in commit `...

2.0.6 → 2.0.7 Patch PR

Closed about 13 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

rdseb667-collab/TokenTradeX #277

2.0.6 → 2.0.7 Patch PR

Closed 2 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 14 updates

SugiSaku8/Deep-School #23

2.0.6 → 2.0.7 Patch PR

Closed 6 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 16 updates

BiancaFSilva/ZombiePlus #7

2.0.6 → 2.0.7 Patch PR

Closed 7 days ago 1 comment

Bump the npm_and_yarn group across 15 directories with 8 updates

web3-ai-game/gcp-deepweay-me #21

2.0.6 → 2.0.7 Patch PR

Closed 9 days ago 1 comment

Bump the production group across 1 directory with 78 updates

AhmedMojahed/shop-web-app #29

2.0.6 → 2.0.7 Patch PR

Open 9 days ago 1 comment

chore(deps): bump dottie from 2.0.6 to 2.0.7

Dustin4444/lighthouse-ci #17

2.0.6 → 2.0.7 Patch PR

Open 9 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 7 updates

FlexNetOS/noa #143

2.0.6 → 2.0.7 Patch PR

Closed 10 days ago 1 comment

chore(deps): bump dottie from 2.0.4 to 2.0.7 in /nms

magma/magma #15829

2.0.4 → 2.0.7 Patch PR

Closed 12 days ago 4 comments

Bump the npm_and_yarn group across 2 directories with 15 updates

Ethan041028/audacieusesV3 #4

2.0.6 → 2.0.7 Patch PR

Closed 12 days ago 1 comment

Bump dottie from 2.0.6 to 2.0.7

lord-joeh/course-rep-management-system #7

2.0.6 → 2.0.7 Patch PR

Open 12 days ago 1 comment

Bump the npm_and_yarn group across 13 directories with 20 updates

JoftheV/helium-program-library #10

2.0.6 → 2.0.7 Patch PR

Open 12 days ago 1 comment

chore(deps): Bump dottie from 2.0.6 to 2.0.7 in /server in the npm_and_yarn group across 1 directory

JesusAraujoDEV/mediart #28

2.0.6 → 2.0.7 Patch PR

Closed 12 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 15 updates

Ethan041028/audacieusesNew #4

2.0.6 → 2.0.7 Patch PR

Closed 12 days ago 1 comment

deps: bump dottie from 2.0.6 to 2.0.7

ESousa97/serverdatabase #39

2.0.6 → 2.0.7 Patch PR

Closed 12 days ago 3 comments

chore(deps): bump dottie from 2.0.6 to 2.0.7

Makr91/BoxVault #224

2.0.6 → 2.0.7 Patch PR

Open 12 days ago 1 comment

build(deps): bump dottie from 2.0.6 to 2.0.7

wmfs/rbac #325

2.0.6 → 2.0.7 Patch PR

Open 12 days ago 1 comment

Bump dottie from 2.0.6 to 2.0.7

yesman234/Sitecore #19

2.0.6 → 2.0.7 Patch PR

Open 12 days ago 2 comments

Bump dottie from 2.0.6 to 2.0.7

yuanjian-org/app #786

2.0.6 → 2.0.7 Patch PR

Open 12 days ago 1 comment

Bump dottie from 2.0.6 to 2.0.7

mitre/tir #169

2.0.6 → 2.0.7 Patch PR

Open 12 days ago 1 comment

chore(deps): bump dottie from 2.0.6 to 2.0.7

ever-co/ever-gauzy #9527

2.0.6 → 2.0.7 Patch PR

Open 13 days ago 5 comments

chore(deps): bump dottie from 2.0.6 to 2.0.7

nanotaboada/ts-node-samples-express-restful #502

2.0.6 → 2.0.7 Patch PR

Open 13 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 22 updates

icemeyer-sudo/projet-02 #1

2.0.2 → 2.0.6 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 21 updates

Audreyb612/architecte-sophie-bluel #1

2.0.2 → 2.0.6 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 35 updates

Dustinturner44/next.js #12

2.0.2 → 2.0.6 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 42 updates

balajirajput96/next.js #3

2.0.2 → 2.0.6 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 17 updates

AKJUS/RitaBot #1

2.0.2 → 2.0.6 Patch PR

Open 4 months ago 1 comment

Bump dottie from 2.0.2 to 2.0.6

openfort-xyz/strapi-sqlite #8

2.0.2 → 2.0.6 Patch PR

Open 4 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 19 updates

Cinho28/P6 #1

2.0.2 → 2.0.6 Patch PR

Open 5 months ago

Bump dottie from 2.0.3 to 2.0.6

maquispe/Project-2 #69

2.0.3 → 2.0.6 Patch PR

Open 5 months ago

Bump the npm_and_yarn group across 1 directory with 4 updates

josh-W42/cheerio-tester #1

2.0.2 → 2.0.6 Patch PR

Open 5 months ago

Bump the npm_and_yarn group across 1 directory with 31 updates

mgifford/strapi #1

2.0.2 → 2.0.6 Patch PR

Open 6 months ago

Bump the npm_and_yarn group across 1 directory with 21 updates

Mentheloup/Javascript_SophieBluelWebsite #1

2.0.2 → 2.0.6 Patch PR

Open 6 months ago

Bump dottie from 2.0.3 to 2.0.6

Emex4gman/nestjs-mongo-mysql-graphql #26

2.0.3 → 2.0.6 Patch PR

Merged 6 months ago

Bump the npm_and_yarn group across 1 directory with 21 updates

Baptisteteix/projet-6 #1

2.0.2 → 2.0.6 Patch PR

Open 6 months ago

chore(deps): bump the npm_and_yarn group across 3 directories with 45 updates

goodgollyholly/cockroachdb-todo-apps #2

2.0.2 → 2.0.6 Patch PR

Open 6 months ago

Bump dottie from 2.0.2 to 2.0.6 in /API_Design

ngonza27/MiniProjects #19

2.0.2 → 2.0.6 Patch PR

Open 6 months ago

Bump the npm_and_yarn group across 1 directory with 21 updates

Oostrich34/Sophie-Bluel #1

2.0.2 → 2.0.6 Patch PR

Open 6 months ago

Bump the npm_and_yarn group across 1 directory with 14 updates

DamienT87/P3-Cr-ez-une-page-web-dynamique-JS #2

2.0.2 → 2.0.6 Patch PR

Open 7 months ago

Bump the npm_and_yarn group across 2 directories with 50 updates

perplext/xsshunter #2

2.0.2 → 2.0.6 Patch PR

Open 7 months ago

Bump the npm_and_yarn group across 2 directories with 49 updates

perplext/xsshunter #1

2.0.2 → 2.0.6 Patch PR

Closed 7 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 16 updates

sparck75/Arbitrage-Tracker-BSC #1

2.0.2 → 2.0.6 Patch PR

Open 7 months ago

Bump the npm_and_yarn group across 1 directory with 21 updates

highfivenico/interior-architect #1

2.0.2 → 2.0.6 Patch PR

Open 7 months ago

Bump the npm_and_yarn group across 1 directory with 15 updates

DamienT87/P3-Cr-ez-une-page-web-dynamique-JS #1

2.0.2 → 2.0.6 Patch PR

Closed 7 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 21 updates

C2LW/Portfolio-architecte-sophie-bluel #1

2.0.2 → 2.0.6 Patch PR

Open 7 months ago

Bump the npm_and_yarn group across 1 directory with 21 updates

Moltozor/Creez-une-page-dynamique-avec-Javascript #1

2.0.2 → 2.0.6 Patch PR

Open 7 months ago

Bump the npm_and_yarn group across 1 directory with 20 updates

Smy619/Portfolio-architecte-sophie-bluel #2

2.0.2 → 2.0.6 Patch PR

Open 7 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 59 updates

NeosapIndia/Dirp-diwo #8

2.0.2 → 2.0.6 Patch PR

Closed 8 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 21 updates

Smy619/Portfolio-architecte-sophie-bluel #1

2.0.2 → 2.0.6 Patch PR

Closed 8 months ago 1 comment

build(deps): bump dottie from 2.0.2 to 2.0.6

ringcentral/rc-unified-crm-extension #142

2.0.2 → 2.0.6 Patch PR

Open 8 months ago

Package Details

Name:	`dottie`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/dottie`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

Fast and safe nested object access and manipulation in JavaScript

Repository:	https://github.com/mickhansen/dottie.js
Homepage:	https://github.com/mickhansen/dottie.js#readme
Latest Release:	`2.0.6` over 2 years ago
Dependent Repos:	161,543
Dependent Packages:	257
Downloads:	8,307,370
Ranking:	Top 0.0866% by dependent repos Top 0.1174% by downloads Top 0.197% by dependent pkgs

PR Status

Open 69 (62.2%)

Merged 5 (4.5%)

Closed 29 (26.1%)

PR Types

Patch 102 (91.9%)

Major 1 (0.9%)

dottie

Security Advisories

dottie is vulnerable to Prototype Pollution bypass via non-first path segments in set() and transform()

dottie vulnerable to Prototype Pollution

Recent PRs

Package Details

Security Advisories

2

Package Information

PR Status

PR Types

`dottie`