Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2020-8116

🗓️ 04 Feb 2020 19:08:57Reported by Debian Security Bug TrackerType 
debiancve
 debiancve🔗 security-tracker.debian.org👁 30 Views

Prototype pollution in dot-prop npm package before versions 4.2.1 and 5.x before 5.1.

Related
Packages
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)
28 Mar 202216:33
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System
17 Aug 202209:46
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities
12 Dec 202317:28
–ibm
IBM Security Bulletins		Security Bulletin: OSS security Scan issues for Concerto installer.
8 Dec 202006:37
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Pak for Applications 4.3 nodejs and nodejs-express Appsody stacks is vulnerable to information disclosure, buffer overflow and prototype pollution exposures
8 Jun 202100:42
–ibm
IBM Security Bulletins		Security Bulletin: Open Source Security issues for NPS console.
15 Dec 202007:03
–ibm
IBM Security Bulletins		Security Bulletin: OSS scan fixes for Content pos
15 Dec 202006:58
–ibm
AlmaLinux		Moderate: nodejs:12 security and bug fix update
19 Oct 202007:13
–almalinux
AlmaLinux		Moderate: nodejs:10 security update
16 Feb 202107:34
–almalinux
BDU FSTEC		The vulnerability of the dot-prop library in application software, Aurora Center, arises from uncontrolled changes to object prototypes’ attributes. This allows attackers to execute “prototype pollution” attacks.
9 Jun 202100:00
–bdu_fstec
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian11allnode-dot-prop5.2.0-1node-dot-prop_5.2.0-1_all.deb
Debian12allnode-dot-prop5.2.0-1node-dot-prop_5.2.0-1_all.deb
Debian13allnode-dot-prop5.2.0-1node-dot-prop_5.2.0-1_all.deb
Debian14allnode-dot-prop5.2.0-1node-dot-prop_5.2.0-1_all.deb
Debian999allnode-dot-prop5.2.0-1node-dot-prop_5.2.0-1_all.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
04 Feb 2020 19:08Current
8.4High risk
Vulners AI Score8.4
CVSS 3.17.3
CVSS 27.5
EPSS0.03079
cve-2020-8116prototype pollutiondot-prop npmjavascriptunix
30