{"vulnerability": "CVE-2020-2845", "sightings": [{"uuid": "5aae8361-0a14-4117-b059-8b3e7014e0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28458", "type": "published-proof-of-concept", "source": "Telegram/p1kctDWMPjRH9UHDphPObPnl4Jga04s8GR_gza3noeTXcn4", "content": "", "creation_timestamp": "2025-12-04T15:00:08.000000Z"}, {"uuid": "a55089a7-8ce4-429c-8cd8-e2cdba52948c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28459", "type": "seen", "source": "https://t.me/cibsecurity/46925", "content": "\u203c CVE-2020-28459 \u203c\n\nThis affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-25T18:33:28.000000Z"}, {"uuid": "878202f6-0c8a-4bdb-8bb6-e4eb5dd9dc25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28451", "type": "seen", "source": "https://t.me/cibsecurity/47408", "content": "\u203c CVE-2020-28451 \u203c\n\nThis affects the package image-tiler before 2.0.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-02T18:17:50.000000Z"}, {"uuid": "d585fc8b-39a0-4998-be3b-f45fcde84d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28453", "type": "seen", "source": "https://t.me/cibsecurity/47416", "content": "\u203c CVE-2020-28453 \u203c\n\nThis affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-02T18:18:01.000000Z"}, {"uuid": "75629a45-3bd1-4f42-964a-a434cd233d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28450", "type": "seen", "source": "https://t.me/cibsecurity/23069", "content": "\u203c CVE-2020-28450 \u203c\n\nThis affects all versions of package decal. The vulnerability is in the extend function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-04T18:34:14.000000Z"}, {"uuid": "a34e53e8-c545-4a57-9ac3-10a1b696d9bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28452", "type": "seen", "source": "https://t.me/cibsecurity/22428", "content": "\u203c CVE-2020-28452 \u203c\n\nThis affects the package com.softwaremill.akka-http-session:core_2.12 from 0 and before 0.6.1; all versions of package com.softwaremill.akka-http-session:core_2.11; the package com.softwaremill.akka-http-session:core_2.13 from 0 and before 0.6.1. CSRF protection can be bypassed by forging a request that contains the same value for both the X-XSRF-TOKEN header and the XSRF-TOKEN cookie value, as the check in randomTokenCsrfProtection only checks that the two values are equal and non-empty.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-20T20:27:19.000000Z"}, {"uuid": "a8450bd1-fb84-4021-8ce2-7c71164d98cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28458", "type": "seen", "source": "https://t.me/cibsecurity/20904", "content": "\u203c CVE-2020-28458 \u203c\n\nAll versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-16T15:25:18.000000Z"}, {"uuid": "b51d122a-dd5e-4fe8-a5df-a72a56c59637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-28450", "type": "seen", "source": "https://t.me/makrushin/183", "content": "", "creation_timestamp": "2026-07-17T10:00:04.759017Z"}, {"uuid": "f8a09e27-cf2b-422b-9302-58fc3342cd36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-28450", "type": "seen", "source": "https://t.me/makrushin/183", "content": "", "creation_timestamp": "2026-07-18T00:00:26.735868Z"}]}