GitHub Advisoryadvisory · npm
GHSA-m7j4-fhg6-xf5v datatables.net vulnerable to Prototype Pollution due to incomplete fix
HIGH
Official page ↗
- Aliases
- CVE-2020-28458
- Ecosystem
- npm
- Packages
- datatables.net
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-1321
- Reviewed
- 2020-12-17
Affected packages
• npm datatables.net: < 1.10.22 → fixed in 1.10.22
Description
All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.
Related
Alias · CVE (1)
- CVE-2020-28458 All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for… vulnerability
Weakness · CWE (1)
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-28458 advisory
- https://github.com/DataTables/DataTablesSrc/commit/a51cbe99fd3d02aa5582f97d4af1615d11a1ea03 web
- https://github.com/DataTables/DataTablesSrc package
- https://github.com/DataTables/Dist-DataTables/blob/master/js/jquery.dataTables.js%23L2766 web
- https://security.netapp.com/advisory/ntap-20240621-0006 web
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1051961 web
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1051962 web
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402 web
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806 web