CVE-2020-28278
1 advisory.
npm/shvl CVE-2020-28278: critical 9.8, EPSS 3.07%
shvl vulnerable to prototype pollution
Action: Upgrade shvl to 2.0.2 or later.
npm i shvl@2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-pqwc-3vhw-qcvq
- https://nvd.nist.gov/vuln/detail/CVE-2020-28278
- https://github.com/robinvdvleuten/shvl/issues/34
- https://github.com/robinvdvleuten/shvl/pull/36
- https://github.com/robinvdvleuten/shvl/commit/513c0848774dfb114ad0d0554abf7927cfdd569e
- https://web.archive.org/web/20210320222933/https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28278
CVE-2020-28278 · published · modified · JSON