CVE-2020-28274

Tuesday, December 08, 2020

N/A

Summary

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution.

Affected Software

Vendor	Product	Version Range	Status
n/a	deepref	`1.1.1, 1.1.2, 1.2.0, 1.2.1`	affected

Weaknesses

Prototype Pollution

ADP Enrichment

CVE Program Container

Additional References

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28274%2Chttps://github.com/isaymatato/deepref/commit/24935e6a1060cb09c641d3075982f0b44cfca4c2

References

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28274%2Chttps://github.com/isaymatato/deepref/commit/24935e6a1060cb09c641d3075982f0b44cfca4c2

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.

←Previous
Next→