CVE-2023-45827

Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the `setByPath` function which can leads to remote code execution (RCE). This issue has been addressed in commit `98daf567` which has been included in release 1.0.2. Users are advised to upgrade. There are no known workarounds to this vulnerability.

• CWE-1321
• CWE-1321

• https://github.com/clickbar/dot-diver/commit/98daf567390d816fd378ec998eefe2e97f293d5aPatch
• https://github.com/clickbar/dot-diver/security/advisories/GHSA-9w5f-mw3p-pj47Vendor Advisory
• https://github.com/clickbar/dot-diver/commit/98daf567390d816fd378ec998eefe2e97f293d5aPatch
• https://github.com/clickbar/dot-diver/security/advisories/GHSA-9w5f-mw3p-pj47Vendor Advisory

Published

Nov 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45821Artifact Hub is a web-based application that enables finding…6.3
• CVE-2023-45822Artifact Hub is a web-based application that enables finding…5.3
• CVE-2023-45823Artifact Hub is a web-based application that enables finding…7.5
• CVE-2023-45824OroPlatform is a PHP Business Application Platform (BAP). A…4.3
• CVE-2023-45825ydb-go-sdk is a pure Go native and database/sql driver for t…5.5
• CVE-2023-45826Leantime is an open source project management system. A 'use…6.5
• CVE-2023-45828Missing Authorization vulnerability in RumbleTalk RumbleTalk…5.4
• CVE-2023-45829Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
• CVE-2023-4583When checking if the Browsing Context had been discarded in …7.5
• CVE-2023-45830Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-45831Cross-Site Request Forgery (CSRF) vulnerability in Pixelativ…8.8
• CVE-2023-45832Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8