Fix CVE–2020–28503

[debricked]

CVE–2020–28503

Vulnerability details

Description

NVD

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

GitHub

Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

CVSS details - 9.8

 

CVSS3 metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

References

    NVD - CVE-2020-28503
    Prototype Pollution in copy-props · CVE-2020-28503 · GitHub Advisory Database · GitHub
    Fix: Avoids prototype pollution by sttk · Pull Request #7 · gulpjs/copy-props · GitHub
    Fix: Avoids prototype pollution (#7) · gulpjs/copy-props@2c738f5 · GitHub

 

Related information

📌 Remember! Check the changes to ensure they don't introduce any breaking changes.
📚 Read more about the CVE