Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-28271 EUVD-2021-1972GHSA-4fr2-j4g9-mppf

Prototype Pollution in deephas

Published Nov 12, 2020 · Updated Aug 4, 2024 · Assigned by Mend

Description

Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— deephas 1.0.5, 1.0.3, 1.0.2, 1.0.1, 1.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm deephas >= 1.0.0, <= 1.0.5 — GHSA-4fr2-j4g9-mppf

References