Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-28270 EUVD-2021-2201GHSA-fxwf-45c7-4ppr

Prototype pollution in object-hierarchy-access

Published Nov 12, 2020 · Updated Aug 4, 2024 · Assigned by Mend

Description

Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— object-hierarchy-access 0.32.0, 0.31.0, 0.30.0, 0.29.1, 0.29.0, 0.28.0, 0.27.1, 0.27.0, 0.26.0, 0.25.2, 0.25.1, 0.25.0, 0.24.0, 0.23.0, 0.22.0, 0.21.0, 0.20.2, 0.20.1, 0.20.0, 0.19.0, 0.18.0, 0.17.0, 0.16.0, 0.15.0, 0.14.1, 0.13.1, 0.12.0, 0.11.0, 0.10.0, 0.9.0, 0.8.0, 0.7.3, 0.7.2, 0.6.0, 0.5.2, 0.5.1, 0.4.3, 0.4.2, 0.4.… —

Affected packages

EcosystemPackageAffectedFixedRecord
npm object-hierarchy-access >= 0.2.0, < 0.33.0 0.33.0 GHSA-fxwf-45c7-4ppr

References