~ / search / GHSA-qr4p-c9wr-phr6

GHSA-qr4p-c9wr-phr6

Prototype pollution in set-in

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-28273

Packages

EcosystemPackageAffectedFixed in
npm set-in < 2.0.1 2.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service and may lead to remote code execution.

References

External links from the advisory. They lead to third-party sites.