CVE-2020-7720
1 advisory.
npm/node-forge CVE-2020-7720: critical 9.8, EPSS 3.19%
Prototype Pollution in node-forge
Action: Upgrade node-forge to 0.10.0 or later.
npm i node-forge@0.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0 | - |
Fixed versions
| 0.10.0 |
Sources
- osv: GHSA-92xj-mqp7-vmcj
- https://nvd.nist.gov/vuln/detail/CVE-2020-7720
- https://github.com/digitalbazaar/forge/commit/6a1e3ef74f6eb345bcff1b82184201d1e28b6756
- https://github.com/digitalbazaar/forge
- https://github.com/digitalbazaar/forge/blob/master/CHANGELOG.md
- https://github.com/digitalbazaar/forge/blob/master/CHANGELOG.md#removed
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-609293
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-598677
CVE-2020-7720 · published · modified · JSON