dom-to-gaffa (>=0.0.1, <=0.0.2), gaffa (>=0.1.0, <=1.23.2) +7 more potentially affected by CVE-2020-7727 via gedi (1.6.3)

gedi NPM version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on gedi and may be impacted: - dom-to-gaffa =0.0.1, =0.1.0, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =0.0.1, =0.3.2, =0.3.3 Source cves: CVE-2020-7727 Source advisory: OSV:GHSA-JH2M-J8PP-55RC...

CVE-2020-7727

All versions of package gedi are vulnerable to Prototype Pollution via the set function...

CVE-2020-7727 Prototype Pollution

All versions of package gedi are vulnerable to Prototype Pollution via the set function...

dom-to-gaffa (>=0.0.1, <=0.0.2), driven (>=0.0.1, <=0.3.3) +12 more potentially affected by CVE-2020-7727 via gedi (>=0.1.5, <=1.6.3)

gedi NPM version =0.1.5, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.3.1, =0.3.3 Source cves: CVE-2020-7727 Source advisory: SNYK:JS-GEDI-598803...