Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-28269 EUVD-2021-2532GHSA-hm82-qr45-h7mw

Prototype Pollution in field

Published Nov 12, 2020 · Updated Aug 4, 2024 · Assigned by Mend

Description

Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— field 0.0.1, 0.1.0, 1.0.0, 1.0.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm field >= 0.0.1, <= 1.0.1 — GHSA-hm82-qr45-h7mw

References