Controlled-merge Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Controlled-merge Project records in CISA KEV

No Controlled-merge Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Controlled-merge 1 record LOW

Records

1 record

TI-2020-17162 CVE-2020-28268 · GHSA-5pg7-v24c-9rp9

Prototype pollution in controlled-merge

LOW 39

Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0357 Published 2020-11-15 Fixed in 1.3.0 CWE-1321

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0