Skip to content
OpenAdvisories
High · 7.5 CVE-2020-28267 EUVD-2022-5655GHSA-wwg2-2crq-6grr

Prototype pollution in @strikeentco/set

Published Nov 10, 2020 · Updated Aug 4, 2024 · Assigned by Mend

Description

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— @strikeentco/set 1.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm @strikeentco/set >= 1.0.0, < 1.0.1 1.0.1 GHSA-wwg2-2crq-6grr

References