CVE-2020-7608

yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload

published March 16, 2020

CVSS
—
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00514 · 43.0th percentile
Published
2020-03-16T19:49Z
EPSS history
Timeline
  • 16 MAR 19:49Z
    yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload
    cvelistv5