Lucene search

K
osvGoogleOSV:GHSA-9FP7-4FJM-Q3MF
HistoryFeb 01, 2022 - 12:51 a.m.

Prototype Pollution in keyget

2022-02-0100:51:01
Google
osv.dev
13
prototype pollution
keyget
vulnerable package
denial of service
remote code execution
incomplete fix
cve-2020-28272.

EPSS

0.017

Percentile

87.9%

The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set, push, and at which could allow an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix to CVE-2020-28272

EPSS

0.017

Percentile

87.9%