CVE-2020-7704
1 advisory.
npm/linux-cmdline CVE-2020-7704: critical 9.8
linux-cmdline is vulnerable to Prototype Pollution via the constructor
Action: Upgrade linux-cmdline to 1.0.1 or later.
npm i linux-cmdline@1.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1 | - |
Fixed versions
| 1.0.1 |
Sources
- osv: GHSA-2c29-wc65-4cx9
- https://nvd.nist.gov/vuln/detail/CVE-2020-7704
- https://github.com/piranna/linux-cmdline/commit/53c61a88bc47eb25d71832205056beaab95cf677
- https://github.com/piranna/linux-cmdline
- https://snyk.io/vuln/SNYK-JS-LINUXCMDLINE-598674
CVE-2020-7704 · published · modified · JSON