Mickhansen Dottie.js vulnerabilities

• dottie project dottie, mickhansen dottie.js +1 more Dottie vulnerable to prototype pollution bypass via non-first path segments in set() and transform() CVE-2026-27837 Fix available 6.3 MediumFebruary 26, 2026