CVE-2020-7608
1 advisory.
npm/yargs-parser CVE-2020-7608: medium 5.3, EPSS 0.51%
yargs-parser Vulnerable to Prototype Pollution
Action: Upgrade yargs-parser to 5.0.1 or later.
npm i yargs-parser@13.1.2npm i yargs-parser@15.0.1npm i yargs-parser@18.1.1npm i yargs-parser@5.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 13.1.2 | - |
| 14.0.0 | 15.0.1 | - |
| 16.0.0 | 18.1.1 | - |
| 0 | 5.0.1 | - |
Fixed versions
| 13.1.2 | 15.0.1 | 18.1.1 | 5.0.1 |
Sources
- osv: GHSA-p9pc-299p-vxgp
- https://nvd.nist.gov/vuln/detail/CVE-2020-7608
- https://github.com/yargs/yargs-parser/commit/1c417bd0b42b09c475ee881e36d292af4fa2cc36
- https://github.com/yargs/yargs-parser/commit/63810ca1ae1a24b08293a4d971e70e058c7a41e2
- https://github.com/yargs/yargs-parser
- https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381
- https://www.npmjs.com/advisories/1500
CVE-2020-7608 · published · modified · JSON