HIGH7.5

GHSA-wwg2-2crq-6grr

Prototype pollution in @strikeentco/set

Quick fix

GHSA-wwg2-2crq-6grr — @strikeentco/set: upgrade to the fixed version with the command below.

npm install @strikeentco/set@1.0.1

Details

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/@strikeentco/set

Introduced in: 1.0.0Fixed in: 1.0.1

Fixnpm install @strikeentco/set@1.0.1

References

https://nvd.nist.gov/vuln/detail/CVE-2020-28267[ADVISORY]
https://github.com/strikeentco/set/commit/102cc6b2e1d1e0c928ced87e75df759d5541ff60[WEB]
https://github.com/strikeentco/set[WEB]
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28267[WEB]