5.6
Moyenne
CVE-2021-23624 This affects the package dotty before 0.1.2
Description
This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| dotty 0.1 | premières → < 0.1.2 | 0.1.2 |