---
title: "dot-prop security advisories"
description: "1 known security advisory for dot-prop, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/dot-prop/security
lang: en
---

[Packages](https://inlinr.com/packages)

# dot-prop

10.2.0 · 21 Jul 2026 MIT 77.2M / week [Repository](https://github.com/sindresorhus/dot-prop) [Homepage](https://github.com/sindresorhus/dot-prop#readme) [npm](https://www.npmjs.com/package/dot-prop) [Atom feed](https://inlinr.com/packages/feed/dot-prop)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands                                                           |
| ---- | ------ | ------------------------------------------------------------------------- |
|      | 10.2.0 | No known advisory                                                         |
|      | 5.3.0  | 3 open advisories, worst high  · last release Sep 2020, no longer updated |

- High  
[dot-prop Prototype Pollution vulnerability](https://inlinr.com/advisories/GHSA-ff7x-qrg7-qggm)GHSA-ff7x-qrg7-qggm · 29 Jul 2020  
fixed in 5.1.1, 4.2.1

### Quality and security signals

What [npm](https://www.npmjs.com/package/dot-prop) and [deps.dev](https://deps.dev/npm/dot-prop) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Reading releases, release notes and advisories…

Registry facts last checked 3 Nov 2026\. Releases and advisories last read 3 Nov 2026.