Arbitrary Command Injection Over HTTP Traffic (CVE-2020-19165; CVE-2020-24219; CVE-2020-28477; CVE-2021-26747; CVE-2021-27328)

Arbitrary Command Injection Over HTTP Traffic...

0i0 (=1.0.10), @1productaweek/react-stately (>=0.1.1 <=0.1.7) +1067 more potentially affected by CVE-2020-28477 via immer (>=7.0.0 <=8.0.0)

immer NPM version =7.0.0, =0.1.1, =0.1.0, =0.0.3-alpha.52, =0.0.10, =0.0.1, =0.1.0, =0.1.1, =0.97.1-20210526212817, =0.1.0, =2.3.1, =1.0.59, =4.4.2, =4.5.9 and more Source cves: CVE-2020-28477 Source advisory: OSV:GHSA-9QMH-276G-X5PJ...

CVE-2020-28477

This affects all versions of package immer...

CVE-2020-28477

creationtimestamp| type| source ---|---|--- 2021-01-19 14:55:56+00:00| seen| https://t.me/cibsecurity/22253...

CVE-2020-28477

This affects all versions of package immer...

CVE-2020-28477 Prototype Pollution

This affects all versions of package immer...

CVE-2020-28477

CVE-2020-28477 affects the Node.js module immer and is described as a denial of service arising from a prototype pollution flaw. The core issue is tied to how patch application handles player-supplied path keys (including array-like keys), which in some disclosures can bypass part of the vulnerab...

CVE-2020-28477

This affects all versions of package immer...

0i0 (=1.0.10), @1productaweek/react-stately (>=0.1.1 <=0.1.7) +1067 more potentially affected by CVE-2020-28477 via immer (>=7.0.0 <=8.0.0)

immer NPM version =7.0.0, =0.1.1, =0.1.0, =0.0.3-alpha.52, =0.0.10, =0.0.1, =0.1.0, =0.1.1, =0.97.1-20210526212817, =0.1.0, =2.3.1, =1.0.59, =4.4.2, =4.5.9 and more Source cves: CVE-2020-28477 Source advisory: SNYK:JS-IMMER-1019369...