High severity7.5NVD Advisory· Published Nov 10, 2020· Updated Jun 17, 2026
CVE-2020-28267
CVE-2020-28267
Description
Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@strikeentco/setnpm | >= 1.0.0, < 1.0.1 | 1.0.1 |
Affected products
3- cpe:2.3:a:set_project:set:1.0.0:*:*:*:*:node.js:*:*
- strikeentco/setdescription
Patches
Vulnerability mechanics
References
4- github.com/strikeentco/set/commit/102cc6b2e1d1e0c928ced87e75df759d5541ff60nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-wwg2-2crq-6grrghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-28267ghsaADVISORY
- www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28267nvdThird Party AdvisoryWEB
News mentions
0No linked articles in our index yet.