Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-28480

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qwp9-52h8-xgg8

Prototype pollution in JointJS The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath) The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution.

gitlab/npm/jointjs/CVE-2020-28480

The package jointjs is vulnerable to Prototype Pollution via `util.setByPath` (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath) The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution.