Critical severity9.8OSV Advisory· Published Nov 12, 2020· Updated Jun 17, 2026

CVE-2020-28271

Description

Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
deephasnpm	>= 1.0.0, <= 1.0.5	—

Affected products

Sharpred/DeephasOSV2 versions
v1.0,1, v1.0.4.release, v1.0.4.update+ 1 more
- (no CPE)range: v1.0,1, v1.0.4.release, v1.0.4.update
- cpe:2.3:a:sharpred:deephas:*:*:*:*:*:node.js:*:*range: >=1.0.0,<=1.0.5
ghsa-coords
pkg:npm/deephas
Range: >= 1.0.0, <= 1.0.5

Patches

Vulnerability mechanics

References

github.com/sharpred/deepHas/commit/2fe011713a6178c50f7deb6f039a8e5435981e20nvdPatchThird Party AdvisoryWEB
www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28271nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-4fr2-j4g9-mppfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-28271ghsaADVISORY
www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28271,ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000