Lucene search
+L
Utils-extend ProjectUtils-extend1.0.8

1 matches found

CVE
CVE
added 2020/04/03 8:52 p.m.129 views

CVE-2020-8147

CVE-2020-8147 affects the npm package utils-extend (version 1.0.8 and earlier). The underlying issue is a prototype pollution flaw in the extend function, allowing an attacker to modify a base Object’s prototype, with potential consequences including remote code execution or denial of service as ...

9.8CVSS9.7AI score0.03149EPSS
Save