Prototype Pollution in property-expr

Overview property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function. Recommendation Upgrade to version 2.0.3 or later References - CVE - GitHub Advisory...

CVE-2020-7707

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function...

CVE-2020-7707

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function...

CVE-2020-7707

CVE-2020-7707 affects the Node.js property-expr module (versions before 2.0.3). Root cause is a prototype pollution flaw in the setter function, enabling remote attackers to execute arbitrary code. Affected: property-expr

CVE-2020-7707 Prototype Pollution

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function...

svelte-forms-lib (>=1.1.1 <=1.3.2) potentially affected by CVE-2020-7707 via property-expr (=2.0.2)

property-expr NPM version =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on property-expr and may be impacted: - svelte-forms-lib =1.1.1, =1.3.2 Source cves: CVE-2020-7707 Source advisory: SNYK:JS-PROPERTYEXPR-598800...