~ / search / GHSA-897m-rjf5-jp39

GHSA-897m-rjf5-jp39

Prototype Pollution in copy-props

Source: GitHub Advisory Database (reviewed) High CVE-2020-28503

Packages

EcosystemPackageAffectedFixed in
npm copy-props < 2.0.5 2.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

References

External links from the advisory. They lead to third-party sites.