Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-28279 EUVD-2022-5400GHSA-vq33-26pr-r4h6

flattenizer vulnerable to prototype pollution

Published Dec 29, 2020 · Updated Aug 4, 2024 · Assigned by Mend

Description

Prototype pollution vulnerability in 'flattenizer' versions 0.0.5 through 1.0.5 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— flattenizer 0.0.5, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm flattenizer >= 0.0.5, < 1.1.1 1.1.1 GHSA-vq33-26pr-r4h6

References