GitHub Advisoryadvisory · npm

GHSA-957j-59c2-j692 Prototype pollution in getobject

CRITICAL Published 2021-10-12 Modified 2023-09-07 Official page ↗

Aliases: CVE-2020-28282
Ecosystem: npm
Packages: getobject
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-1321
Reviewed: 2021-10-08

Affected packages

• npm getobject: < 1.0.0 → fixed in 1.0.0

Description

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution.

Related

Alias · CVE (1)

CVE-2020-28282 Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code… vulnerability

Weakness · CWE (1)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References