原始 OSV JSON
{
"id": "GHSA-m7j4-fhg6-xf5v",
"aliases": [
"CVE-2020-28458"
],
"details": "All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.",
"summary": "datatables.net vulnerable to Prototype Pollution due to incomplete fix",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.22"
}
]
}
],
"package": {
"name": "datatables.net",
"ecosystem": "npm"
}
}
],
"modified": "2024-06-21T21:33:49Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"published": "2020-12-17T21:00:50Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28458",
"type": "ADVISORY"
},
{
"url": "https://github.com/DataTables/DataTablesSrc/commit/a51cbe99fd3d02aa5582f97d4af1615d11a1ea03",
"type": "WEB"
},
{
"url": "https://github.com/DataTables/DataTablesSrc",
"type": "PACKAGE"
},
{
"url": "https://github.com/DataTables/Dist-DataTables/blob/master/js/jquery.dataTables.js%23L2766",
"type": "WEB"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240621-0006",
"type": "WEB"
},
{
"url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1051961",
"type": "WEB"
},
{
"url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1051962",
"type": "WEB"
},
{
"url": "https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402",
"type": "WEB"
},
{
"url": "https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-1321"
],
"severity": "HIGH",
"github_reviewed": true,
"nvd_published_at": "2020-12-16T11:15:00Z",
"github_reviewed_at": "2020-12-17T18:27:07Z"
}
}