Description

Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Remediation

References

https://github.com/jprichardson/field/blob/2a3811dfc4cdd13833977477d2533534fc61ce06/lib/field.js#L39

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28269

Related Vulnerabilities

CVE-2022-29172 Vulnerability in npm package auth0-lock

CVE-2019-10806 Vulnerability in npm package vega-util

CVE-2023-25569 Vulnerability in maven package com.ctrip.framework.apollo:apollo

CVE-2020-36186 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2023-28155 Vulnerability in npm package request

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Third Party Advisory Exploit