CVE-2020-28449: Prototype Pollution in decal
Summary
CVE-2020-28449: Prototype Pollution in decal. Affects decal versions < 2.1.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
decal is an npm package that is used for [provide brief description of the package's functionality and key attributes]. It is vulnerable to a prototype pollution vulnerability in the set function.
Vulnerability Detail
The vulnerability in decal allows an attacker to manipulate the prototype of objects, leading to potential security risks. By injecting malicious data into the set function, an attacker can modify the behavior of the application, potentially leading to remote code execution or other unauthorized actions. This vulnerability affects all versions of decal up to and including version 2.1.3.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to update to a non-vulnerable version of decal as soon as possible.
Conclusion
In conclusion, the decal package is vulnerable to a prototype pollution vulnerability in the set function. Users should update to a non-vulnerable version of decal as soon as possible to mitigate the risk of remote code execution or other unauthorized actions. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for decal →
FAQ
Prototype pollution is a vulnerability that allows an attacker to modify the prototype of objects, leading to potential security risks.
This vulnerability in decal can potentially lead to remote code execution or other unauthorized actions.
All versions of decal up to and including version 2.1.3 are affected by this vulnerability.
To fix this vulnerability, update decal to a version that is not affected by the vulnerability.
There is no known workaround for this vulnerability. It is recommended to update to a non-vulnerable version of decal.
References
Related vulnerabilities
Recent vulnerabilities recorded for decal.
