GHSA-8f89-2fwj-5v5r

Improper Input Validation in klona

Source: GitHub Advisory Database (reviewed) High CVE-2020-8125

Packages

Ecosystem	Package	Affected	Fixed in
npm	klona	< 1.1.1	1.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-8125 advisory
https://github.com/lukeed/klona/commit/200e8d1fd383a54790ee6fc8228264c21954e38e web
https://hackerone.com/reports/778414 web