CVE-2020-28271
9.8 CRITICALPrototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to ...
Published: 2020-11-12 · Last updated: 2026-05-19
Severity and scoring
- CVSS
- 9.8 CRITICAL
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CWE
- CWE-1321
Affected products
| Vendor | Product |
|---|---|
| sharpred | deephas |
Description
Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.
Source: NVD
References
- [NVD]https://nvd.nist.gov/vuln/detail/CVE-2020-28271
- [Patch]https://github.com/sharpred/deepHas/commit/2fe011713a6178c50f7deb6f039a8e5435981e20
- [Exploit reference]https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28271
- [Patch]https://github.com/sharpred/deepHas/commit/2fe011713a6178c50f7deb6f039a8e5435981e20
- [Exploit reference]https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28271
Related CVEs
Same CWE
- CVE-2026-12209 — A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10 (5.3 MEDIUM)
- CVE-2026-12208 — A weakness has been identified in jsonata-js jsonata up to 2.2.0 (5.3 MEDIUM)
- CVE-2026-53609 — ApostropheCMS is an open-source Node.js content management system (9.1 CRITICAL)
- CVE-2026-44495 — Axios is a promise based HTTP client for the browser and Node.js (7.0 HIGH)
- CVE-2026-44494 — Axios is a promise based HTTP client for the browser and Node.js (8.7 HIGH)