Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-28268

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5pg7-v24c-9rp9

Prototype pollution in controlled-merge Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial of service and may lead to remote code execution.

gitlab/npm/controlled-merge/CVE-2020-28268

Improper Input Validation A prototype pollution vulnerability in controlled-merge may allow an attacker to cause a denial of service, or possibly lead to remote code execution.