CVE-2020-28274

Published: Dec 8, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution.

Affected (1)

Products: Deepref Project: Deepref

Deepref Project

1 product

Deepref

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Deepref Project Deepref	From 1.1.1 to 1.2.1

References (2)

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28274%2Chttps://github.com/isaymatato/deepref/commit/24935e6a1060cb09c641d3075982f0b44cfca4c2

Source: vulnerabilitylab@mend.io

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28274%2Chttps://github.com/isaymatato/deepref/commit/24935e6a1060cb09c641d3075982f0b44cfca4c2

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.