Gulpjs

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Gulpjs records in CISA KEV

No Gulpjs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Copy-props · all components

TI-2020-17306 CVE-2020-28503 · GHSA-897m-rjf5-jp39

MEDIUM 45

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01697 Published 2021-03-23 Fixed in 2.0.5 CWE-1321