CVE-2020-7772

2020-11-1515:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.9%

This affects the package doc-path before 2.1.2.

CPENameOperatorVersion
doc-patheq2.1.0
doc-patheq1.0.2
doc-patheq1.0.1
doc-patheq1.3.1

Name	Operator	Version
doc-path	eq	2.1.0
doc-path	eq	1.0.2
doc-path	eq	1.0.1
doc-path	eq	1.3.1

References

github.com/mrodrig/doc-path/blob/stable/src/path.js%23L54

github.com/mrodrig/doc-path/commit/3e2bb168cf303bffcd7fae5f8d05e5300c1541c7

snyk.io/vuln/SNYK-JS-DOCPATH-1011952