Approved changes feed: RSS · Atom

cpe:2.3:a:furqansofware:node_whois:-:*:*:*:*:node.js:*:*

part: a version: - update: *

VendorFurqansofware (8a75c27b-391c-5bd5-90f4-ebd6eee3d282)
ProductNode Whois (8223a122-6d67-5b38-bea7-a7b981336e19)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/furqansoftware/node-whois purl2cpe 2026-06-01 10:16:05.130264

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36618 vulnerable 2026-06-08 05:25:49.237884 Furqan node-whois index.coffee prototype pollution
MEDIUM (6.3)
A vulnerability classified as critical has been found in Furqan node-whois. Affected is an unknown function of the file index.coffee. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). It is possible to launch the attack remotely. The name of the patch is 46ccc2aee8d063c7b6b4dee2c2834113b7286076. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216252.
Published: 2022-12-19T00:00:00.000Z
Updated: 2025-04-15T12:57:46.612Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.