CVE-2020-28503

Published March 23rd, 2021

View on NVD ↗

CVSS v3

7.3

HIGH

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

gulpjs/copy-props

Copy properties deeply between two objects

GitHub

9