GitHub Advisoryadvisory · npm

GHSA-897m-rjf5-jp39 Prototype Pollution in copy-props

HIGH Published 2022-01-06 Modified 2021-03-24 Official page ↗

Aliases: CVE-2020-28503
Ecosystem: npm
Packages: copy-props
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses: CWE-1321
Reviewed: 2021-03-24

Affected packages

• npm copy-props: < 2.0.5 → fixed in 2.0.5

Description

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

Related

Alias · CVE (1)

CVE-2020-28503 The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality. vulnerability

Weakness · CWE (1)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References