CVE-2020-28281

CVE-2020-28281 affects the npm package set-object-value (versions 0.0.0–0.0.5). The underlying issue is prototype pollution in set-object-value, enabling an attacker to perform DoS and potentially remote code execution by manipulating object prototypes. Connected advisories confirm this prototype...