Lucene search
K

7 matches found

OSV
OSV
added 2020/09/14 9:42 p.m.31 views

GHSA-92XJ-MQP7-VMCJ Prototype Pollution in node-forge

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS8.1AI score0.02085EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2020/09/01 6:18 p.m.27 views

CVE-2020-7720

A flaw was found in nodejs-node-forge. A Prototype Pollution via the util.setPath function is possible...

7.3CVSS3.9AI score0.02085EPSS
Exploits1References4
NVD
NVD
added 2020/09/01 10:15 a.m.22 views

CVE-2020-7720

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS9.4AI score0.02085EPSS
Exploits1References3
OSV
OSV
added 2020/09/01 10:15 a.m.2 views

UBUNTU-CVE-2020-7720

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS7.2AI score0.02085EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2020/09/01 10:15 a.m.25 views

CVE-2020-7720

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS7.1AI score0.02085EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2020/09/01 9:35 a.m.27 views

CVE-2020-7720

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...

9.8CVSS8.3AI score0.02085EPSS
Exploits1
CVE
CVE
added 2020/09/01 9:35 a.m.143 views

CVE-2020-7720

CVE-2020-7720 is a prototype pollution vulnerability in the node-forge library (util.setPath) present in older node-forge releases. Multiple connected sources confirm that versions prior to 0.10.0 are affected, with 0.10.0 removing the vulnerable functions. Public risk scores in the sources range...

9.8CVSS7.1AI score0.02085EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder