CVE-2020-28280
1 advisory.
npm/predefine CVE-2020-28280: critical 9.8
Prototype pollution vulnerability in 'predefine'
Action: Upgrade predefine to 0.1.3 or later.
npm i predefine@0.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.3 | - |
Fixed versions
| 0.1.3 |
Sources
- osv: GHSA-mx3x-ghqm-r43h
- https://nvd.nist.gov/vuln/detail/CVE-2020-28280
- https://github.com/bigpipe/predefine/commit/1a86a013c0b37c9d6ca078ba34017052af38b7fc
- https://github.com/bigpipe/predefine
- https://github.com/bigpipe/predefine/blob/238137e3d1b8288ff5d7529c3cbcdd371888c26b/index.js#L284
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28280
CVE-2020-28280 · published · modified · JSON