Prototype pollution vulnerability in 'libnested

Description

Prototype pollution vulnerability in ‘libnested’ versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution.

Recommendation

No fix is available yet. Followings are affected versions:

• >= 0.0.0, <= 1.5.0

References

• GHSA-3r9x-mjrm-2725
• www.whitesourcesoftware.com
• CVE-2020-28283
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Prototype pollution vulnerability in 'deep-set - CVE-2020-28276
• Prototype pollution vulnerability in 'deepref - CVE-2020-28274
• eivindfjeldstad-dot contains prototype pollution vulnerability - CVE-2020-7639
• dot-prop Prototype Pollution vulnerability - CVE-2020-8116

You might also like:

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

Tags:

npm

libnested