New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix CVE–2020–28503 #1

Open

debricked wants to merge 1 commit into main from debricked-fix-CVE_2020_28503-d0e155c3384883d8

debricked bot commented Feb 23, 2023

CVE–2020–28503

Vulnerability details

Description

NVD

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

GitHub

Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

CVSS details -

9.8

CVSS3 metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

References

    NVD - CVE-2020-28503
    Prototype Pollution in copy-props · CVE-2020-28503 · GitHub Advisory Database · GitHub
    Fix: Avoids prototype pollution by sttk · Pull Request #7 · gulpjs/copy-props · GitHub
    Fix: Avoids prototype pollution (#7) · gulpjs/copy-props@2c738f5 · GitHub

Related information

📌 Remember! Check the changes to ensure they don't introduce any breaking changes.
📚 Read more about the CVE


          Fix CVE–2020–28503

a9bab0d

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment