CVE-2020-7637

2020-04-0613:15:12

Google

osv.dev

0.001 Low

EPSS

Percentile

38.8%

JSON

class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. The classToPlainFromExist function could be tricked into adding or modifying properties of Object.prototype using a proto payload.

CPENameOperatorVersion
class-transformereq0.0.11
class-transformereq0.0.13
class-transformereq0.0.16
class-transformereq0.0.19
class-transformereq0.0.3
class-transformereq0.0.8
class-transformereq0.0.9
class-transformereq0.0.6
class-transformereq0.1.0
class-transformereq0.0.2

Name	Operator	Version
class-transformer	eq	0.0.11
class-transformer	eq	0.0.13
class-transformer	eq	0.0.16
class-transformer	eq	0.0.19
class-transformer	eq	0.0.3
class-transformer	eq	0.0.8
class-transformer	eq	0.0.9
class-transformer	eq	0.0.6
class-transformer	eq	0.1.0
class-transformer	eq	0.0.2