CVE-2020-28274 — n/a / deepref

Description (CNA)

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution.

Affected (CNA)

Vendor / product	Versions
n/a / deepref	affected 1.1.1, 1.1.2, 1.2.0, 1.2.1

CWE

No CWE identifiers supplied.

References

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28274%2Chttps://github.com/isaymatato/deepref/commit/24935e6a1060cb09c641d3075982f0b44cfca4c2

ADP enrichment

CVE

No English description supplied.

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28274%2Chttps://github.com/isaymatato/deepref/commit/24935e6a1060cb09c641d3075982f0b44cfca4c2