Lucene search
+L

1 matches found

CVE
CVE
added 2020/11/12 10:15 a.m.60 views

CVE-2020-7770

The CVE-2020-7770 entry concerns json8 before 1.0.3. A function that adds a property to a target object does not properly validate the key being set, enabling prototype pollution. Affected versions are prior to 1.0.3; remediation is to upgrade json8 to version 1.0.3 or later. Other linked advisor...

9.8CVSS7.8AI score0.0187EPSS
Save