CVE-2020-28478

This affects the package gsap before 3.6.0...

CVE-2020-28478 Prototype Pollution

This affects the package gsap before 3.6.0...

CVE-2020-28478

The CVE-2020-28478 entry concerns the gsap JavaScript library with a Prototype Pollution vulnerability affecting all versions before 3.6.0. The connected documents corroborate that an attacker could pollute Object.prototype via unsafe recursive merges or path-based property definitions, enabling ...