CVE-2020-7774

Prototype Pollution

High · published November 17, 2020

Patch now

High probability of exploitation

CVSS calls it high at 7.3. It sits in the 99.4th percentile for exploit probability.

CVSS v3.1
7.3
EPSS
69%
Percentile
99.4
In the wild
Unconfirmed
What it is

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P
CVSS v4.0
Not supplied
EPSS
0.69377 · 99.4th percentile
Published
2020-11-17T12:30Z
EPSS history
Timeline
  • 17 NOV 12:30Z
    Prototype Pollution
    cvelistv5