Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-28276 EUVD-2022-5576GHSA-wgxm-rg53-h2c6

Prototype pollution vulnerability in 'deep-set'

Published Dec 29, 2020 · Updated Aug 4, 2024 · Assigned by Mend

Description

Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— deep-set 1.0.0, 1.0.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm deep-set >= 1.0.0, <= 1.0.1 — GHSA-wgxm-rg53-h2c6

References