Prototype Pollution in property-expr

Overview property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function. Recommendation Upgrade to version 2.0.3 or later References - CVE - GitHub Advisory...

svelte-forms-lib (>=1.1.1, <=1.3.2) potentially affected by CVE-2020-7707 via property-expr (2.0.2)

property-expr NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on property-expr and may be impacted: - svelte-forms-lib =1.1.1, =1.3.2 Source cves: CVE-2020-7707 Source advisory: OSV:GHSA-6FW4-HR69-G3RV...

svelte-forms-lib (>=1.1.1, <=1.3.2) potentially affected by CVE-2020-7707 via property-expr (2.0.2)

property-expr NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on property-expr and may be impacted: - svelte-forms-lib =1.1.1, =1.3.2 Source cves: CVE-2020-7707 Source advisory: GHSA-6FW4-HR69-G3RV...

CVE-2020-7707

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function...

CVE-2020-7707

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function...

@1337lawyers/design (>=0.1.0, <=0.12.14), @1337lawyers/gatsby-theme-1337 (0.0.1) +1441 more potentially affected by CVE-2020-7707 via property-expr (>=1.0.1, <=2.0.2)

property-expr NPM version =1.0.1, =0.1.0, =1.0.0, =0.0.1-alpha.82, =1.0.0-alpha.46, =1.0.12-alpha.0, =1.0.12-alpha.0, =1.0.0, =1.1.0, =1.3.24-alpha.0, =0.0.1-alpha.1, =2.149.0, =2.152.0 - @amorist/gatsby-theme-antd 1.0.0 - @andersonbarros/strapi-plugin-content-type-builder 3.0.0-beta.16.8-0 and...

CVE-2020-7707

CVE-2020-7707 affects the Node.js property-expr module (versions before 2.0.3). Root cause is a prototype pollution flaw in the setter function, enabling remote attackers to execute arbitrary code. Affected: property-expr

CVE-2020-7707 Prototype Pollution

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function...

svelte-forms-lib (>=1.1.1, <=1.3.2) potentially affected by CVE-2020-7707 via property-expr (2.0.2)

property-expr NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on property-expr and may be impacted: - svelte-forms-lib =1.1.1, =1.3.2 Source cves: CVE-2020-7707 Source advisory: SNYK:JS-PROPERTYEXPR-598800...