CVE-2020-7748

2020-10-2011:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.8%

JSON

This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.

CPENameOperatorVersion
tsedeq4.15.1
tsedeq5.14.1
tsedeq4.20.0
tsedeq4.17.6
tsedeq1.4.0-0
tsedeq4.9.0
tsedeq5.50.0
tsedeq4.5.2
tsedeq5.31.4
tsedeq5.0.5