CVE-2020-28479

2021-01-1915:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.5%

JSON

The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.

CPENameOperatorVersion
jointeq2.1.3
jointeq2.1.1
jointeq0.9.6
jointeq0.9.0
jointeq3.2.0
jointeq0.9.1
jointeq3.1.0
jointeq0.9.9
jointeq3.0.3
jointeq1.1.0

Name	Operator	Version
joint	eq	2.1.3
joint	eq	2.1.1
joint	eq	0.9.6
joint	eq	0.9.0
joint	eq	3.2.0
joint	eq	0.9.1
joint	eq	3.1.0
joint	eq	0.9.9
joint	eq	3.0.3
joint	eq	1.1.0

Rows per page:

1-10 of 331

References

github.com/clientIO/joint/releases/tag/v3.3.0

snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1062040

snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1062039

snyk.io/vuln/SNYK-JS-JOINTJS-1062038