CVE-2020-28471

This affects the package properties-reader before 2.2.0...

CVE-2020-28471

This affects the package properties-reader before 2.2.0...

CVE-2020-28471 Prototype Pollution

This affects the package properties-reader before 2.2.0...

CVE-2020-28471

CVE-2020-28471 affects the Node.js package properties-reader before v2.2.0 and is a prototype pollution vulnerability. Public docs confirm the issue as a prototype pollution in properties-reader, with Bitbucket Data Center/Server references noting the vulnerability in 8.19.x releases and advising...

@adobe/aio-app-scripts (>=0.6.0, <=2.3.0), @adobe/aio-cli (>=2.1.0, <=4.0.0) +21 more potentially affected by CVE-2020-28471 via properties-reader (>=2.0.0, <=2.1.1)

properties-reader NPM version =2.0.0, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =1.7.0, =0.0.16, =2.0.0-alpha.0, =2.4.1-next.238, =2.0.0-RC1, =2.1.1-next.0, =2.1.1-next.0, =2.2.1-next.5, =2.1.1-next.0, =2.5.2-next.17 and more Source cves: CVE-2020-28471 Source advisory: OSV:GHSA-JXVF-M3X5-M...

@adobe/aio-app-scripts (>=0.6.0, <=2.3.0), @adobe/aio-cli (>=2.1.0, <=4.0.0) +21 more potentially affected by CVE-2020-28471 via properties-reader (>=2.0.0, <=2.1.1)

properties-reader NPM version =2.0.0, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =1.7.0, =0.0.16, =2.0.0-alpha.0, =2.4.1-next.238, =2.0.0-RC1, =2.1.1-next.0, =2.1.1-next.0, =2.2.1-next.5, =2.1.1-next.0, =2.5.2-next.17 and more Source cves: CVE-2020-28471 Source advisory:...