Lucene search
+L
YargsYargs-parser14.0.0

1 matches found

CVE
CVE
added 2020/03/16 7:49 p.m.602 views

CVE-2020-7608

CVE-2020-7608 affects the yargs-parser package and enables prototype pollution via a proto payload, allowing modification of Object.prototype. Public data notes local/remote impact depending on the environment, with CVSS vectors indicating low-to-medium base severity (NVD CVSS v3.1: 5.3, LOCAL, L...

5.3CVSS6.9AI score0.00514EPSS
Save