5 matches found
Prototype Pollution in locutus
All versions of package locutus prior to version 2.0.12 are vulnerable to Prototype Pollution via the php.strings.parsestr function...
CVE-2020-7719
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parsestr function...
Code injection
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parsestr function...
CVE-2020-7719
CVE-2020-7719 affects locutus versions before 2.0.12 and is due to a prototype pollution flaw exposed via the php.strings.parse_str function. The vulnerability is described across sources (NVD, npm advisory, OSV, GHSA) and is mitigated by upgrading locutus to 2.0.12 or later. If not upgrading, af...
