GHSA-fxwf-45c7-4ppr
Prototype pollution in object-hierarchy-access
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | object-hierarchy-access | >= 0.2.0, < 0.33.0 | 0.33.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Overview:Prototype pollution vulnerability in ‘object-hierarchy-access’ versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service and may lead to remote code execution.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2020-28270
- https://github.com/mjpclab/object-hierarchy-access/commit/7b1aa134a8bc4a376296bcfac5c3463aef2b7572
- https://github.com/mjpclab/object-hierarchy-access
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28270
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28270,