CVE-2020-28273
1 advisory.
npm/set-in CVE-2020-28273: critical 9.8, EPSS 4.04%
Prototype pollution in set-in
Action: Upgrade set-in to 2.0.1 or later.
npm i set-in@2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: GHSA-qr4p-c9wr-phr6
- https://nvd.nist.gov/vuln/detail/CVE-2020-28273
- https://github.com/ahdinosaur/set-in/commit/e431effa00195a6f06b111e09733cd1445a91a88
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28273
CVE-2020-28273 · published · modified · JSON