Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-28283 EUVD-2021-2150GHSA-3r9x-mjrm-2725

Prototype pollution vulnerability in 'libnested'

Published Dec 29, 2020 · Updated Aug 4, 2024 · Assigned by Mend

Description

Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— libnested 0.0.0, 1.0.0, 1.1.0, 1.2.1, 1.2.3, 1.3.1, 1.3.2, 1.4.0, 1.4.1, 1.5.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm libnested >= 0.0.0, <= 1.5.0 — GHSA-3r9x-mjrm-2725

References