Prototype Pollution in gedi

2021-05-0618:12:47

CWE-1321

GitHub Advisory Database

github.com

0.005 Low

EPSS

Percentile

76.8%

All versions of package gedi up to and including version 1.6.3 are vulnerable to Prototype Pollution via the set function.

CPENameOperatorVersion
gedile1.6.3

CPE	Name	Operator	Version
	gedi	le	1.6.3

References

github.com/advisories/GHSA-jh2m-j8pp-55rc

nvd.nist.gov/vuln/detail/CVE-2020-7727

snyk.io/vuln/SNYK-JS-GEDI-598803

0.005 Low

EPSS

Percentile

76.8%

Related for GHSA-JH2M-J8PP-55RC