CVE-2020-28274

Name of the Vulnerable Software and Affected Versions deepref versions 1.1.1 through 1.2.1

Description The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability.

Recommendations For deepref versions 1.1.1 through 1.2.1, update to a version outside of the affected range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.