CVE-2020-28442

Critical (9.8) in js-data js-data. EPSS 2.0% chance of exploitation in the next 30 days. Fixed in js-data 3.0.10.

EPSS

2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)

Published

2020-12-15

Modified

2026-06-17

Record from

the NVD, synced 2026-10-19

Affected

• js-data:js-data

Packages (OSV)

References

• https://github.com/js-data/js-data/blob/master/src/utils.js%23L417
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1050978
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050979
• https://snyk.io/vuln/SNYK-JS-JSDATA-1023655
• https://github.com/js-data/js-data/blob/master/src/utils.js%23L417

Check your stackJSON