@adeunis/codecs (>=1.3.0, <=1.4.0), @linkapi.solutions/nodejs-sdk (>=1.0.5, <=2.0.2) +3 more potentially affected by CVE-2020-7772 via doc-path (>=2.0.0, <=2.1.0)

doc-path NPM version =2.0.0, =1.3.0, =1.0.5, =3.2.0, =3.7.7 Source cves: CVE-2020-7772 Source advisory: OSV:GHSA-GM8G-XHH8-RMWR...

CVE-2020-7772

creationtimestamp| type| source ---|---|--- 2020-11-15 18:36:18+00:00| seen| https://t.me/cibsecurity/16330...

CVE-2020-7772

This affects the package doc-path before 2.1.2...

CVE-2020-7772

CVE-2020-7772 applies to the doc-path package (Node.js). Connected sources confirm a prototype pollution vulnerability affecting doc-path versions prior to 2.3.0 (initially noted as before 2.1.2). Mitigation: upgrade doc-path to 2.3.0 or higher. The issue enables pollution via object prototype mo...

@adeunis/codecs (>=1.3.0, <=1.4.0), @koalarx/utils (>=3.0.7, <=3.0.8) +5 more potentially affected by CVE-2020-7772 via doc-path (>=2.0.0, <=2.2.0)

doc-path NPM version =2.0.0, =1.3.0, =3.0.7, =1.0.5, =3.2.0, =1.1.4, =1.2.3 Source cves: CVE-2020-7772 Source advisory: SNYK:JS-DOCPATH-1011952...