CVE-2020-28496
1 advisory.
npm/three CVE-2020-28496: high 7.5
Denial of service in three
Action: Upgrade three to 0.125.0 or later.
npm i three@0.125.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.125.0 | - |
Fixed versions
| 0.125.0 |
Sources
- osv: GHSA-fq6p-x6j3-cmmq
- https://nvd.nist.gov/vuln/detail/CVE-2020-28496
- https://github.com/mrdoob/three.js/issues/21132
- https://github.com/mrdoob/three.js/pull/21143/commits/4a582355216b620176a291ff319d740e619d583e
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1065972
- https://snyk.io/vuln/SNYK-JS-THREE-1064931
CVE-2020-28496 · published · modified · JSON