GHSA-m7j4-fhg6-xf5v
Suggest an improvement- Source
- https://github.com/advisories/GHSA-m7j4-fhg6-xf5v
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/12/GHSA-m7j4-fhg6-xf5v/GHSA-m7j4-fhg6-xf5v.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-m7j4-fhg6-xf5v
- Aliases
- Published
- 2020-12-17T21:00:50Z
- Modified
- 2025-01-14T08:57:27.301709Z
- Severity
-
- 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- datatables.net vulnerable to Prototype Pollution due to incomplete fix
- Details
-
All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.
- Database specific
{ "nvd_published_at": "2020-12-16T11:15:00Z", "severity": "HIGH", "github_reviewed_at": "2020-12-17T18:27:07Z", "github_reviewed": true, "cwe_ids": [ "CWE-1321" ] }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2020-28458
- https://github.com/DataTables/DataTablesSrc/commit/a51cbe99fd3d02aa5582f97d4af1615d11a1ea03
- https://github.com/DataTables/DataTablesSrc
- https://github.com/DataTables/Dist-DataTables/blob/master/js/jquery.dataTables.js%23L2766
- https://security.netapp.com/advisory/ntap-20240621-0006
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1051961
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1051962
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806
Affected packages
npm / datatables.net
Package
- Name
- datatables.net
- View open source insights on deps.dev
- Purl
- pkg:npm/datatables.net