This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-8116 →

DEBIAN-CVE-2020-8116

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary prop...

Original description

The description as published by the source.

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 node-dot-prop

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1"}]}]

Debian:13 node-dot-prop

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1"}]}]

Debian:14 node-dot-prop

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1"}]}]

References

advisory security-tracker.debian.org