CVE-2020-7724
1 advisory.
npm/tiny-conf CVE-2020-7724: critical 9.8, EPSS 1.92%
Prototype Pollution in tiny-conf
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4q97-fh3f-j294
- https://nvd.nist.gov/vuln/detail/CVE-2020-7724
- https://github.com/tiny-conf/tiny-conf/commit/1f7be78bc68927996647cd45b4367f8975a3ea05
- https://snyk.io/vuln/SNYK-JS-TINYCONF-598792
CVE-2020-7724 · published · modified · JSON