CVE-2020-7772
1 advisory.
npm/doc-path CVE-2020-7772: critical 9.8, EPSS 2.77%
Prototype Pollution in doc-path
Action: Upgrade doc-path to 2.1.2 or later.
npm i doc-path@2.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.2 | - |
Fixed versions
| 2.1.2 |
Sources
- osv: GHSA-gm8g-xhh8-rmwr
- https://nvd.nist.gov/vuln/detail/CVE-2020-7772
- https://github.com/mrodrig/doc-path/commit/3e2bb168cf303bffcd7fae5f8d05e5300c1541c7
- https://github.com/mrodrig/doc-path/blob/stable/src/path.js%23L54
- https://snyk.io/vuln/SNYK-JS-DOCPATH-1011952
CVE-2020-7772 · published · modified · JSON