GitHub Advisoryadvisory · npm

GHSA-8f89-2fwj-5v5r Improper Input Validation in klona

HIGH Published 2021-04-13 Modified 2021-03-30 Official page ↗
Aliases
CVE-2020-8125
Ecosystem
npm
Packages
klona
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Reviewed
2021-03-30

Affected packages

• npm klona: < 1.1.1 → fixed in 1.1.1

Description

Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona.

Related

Alias · CVE (1)

  • CVE-2020-8125 Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References