@badgeup/badgeup-ionic-client (>=1.0.1, <=1.0.3), @codedungeon/code-assistant (>=0.0.1, <=0.0.4-dev.53) +42 more potentially affected by CVE-2020-8116 via dot-prop (>=4.0.0, <=4.2.0)

🗓️ 29 Jul 2020 20:56:59Reported by Vulners OSVType

vulnersosv🔗 osv.dev👁 3 Views

dot-prop 4.0.0-4.2.0 vulnerable to prototype pollution (CVE-2020-8116), affecting 40+ dependent packages.

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	17 Aug 202209:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: OSS security Scan issues for Concerto installer.	8 Dec 202006:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Applications 4.3 nodejs and nodejs-express Appsody stacks is vulnerable to information disclosure, buffer overflow and prototype pollution exposures	8 Jun 202100:42	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Security issues for NPS console.	15 Dec 202007:03	–	ibm
IBM Security Bulletins	Security Bulletin: OSS scan fixes for Content pos	15 Dec 202006:58	–	ibm
ATTACKERKB	CVE-2020-8116	4 Feb 202020:15	–	attackerkb
AlmaLinux	Moderate: nodejs:12 security and bug fix update	19 Oct 202007:13	–	almalinux
AlmaLinux	Moderate: nodejs:10 security update	16 Feb 202107:34	–	almalinux

13 Mar 2026 21:59Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.3

CVSS 27.5

EPSS0.03079

dot-prop prototype-pollution CVE-2020-8116 transitive-dependency npm affected-packages