Critical severity9.8NVD Advisory· Published Dec 29, 2020· Updated Jun 17, 2026
CVE-2020-28282
CVE-2020-28282
Description
Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
getobjectnpm | < 1.0.0 | 1.0.0 |
Affected products
3- cpe:2.3:a:getobject_project:getobject:0.1.0:*:*:*:*:node.js:*:*
- getobject/getobjectdescription
Patches
Vulnerability mechanics
References
4- github.com/cowboy/node-getobject/blob/aba04a8e1d6180eb39eff09990c3a43886ba8937/lib/getobject.jsnvdExploitThird Party AdvisoryWEB
- www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28282nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-957j-59c2-j692ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-28282ghsaADVISORY
News mentions
0No linked articles in our index yet.