GHSA-4fr2-j4g9-mppf

Prototype Pollution in deephas

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-28271

Packages

Ecosystem	Package	Affected	Fixed in
npm	deephas	>= 1.0.0, <= 1.0.5	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-28271 advisory
https://github.com/sharpred/deepHas/commit/2fe011713a6178c50f7deb6f039a8e5435981e20 web
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28271 web
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28271, web