CVE-2020-7774
1 advisory.
npm/y18n CVE-2020-7774: high 7.3
Prototype Pollution in y18n
Action: Upgrade y18n to 3.2.2 or later.
npm i y18n@3.2.2npm i y18n@4.0.1npm i y18n@5.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.2 | - |
| 4.0.0 | 4.0.1 | - |
| 5.0.0 | 5.0.5 | - |
Fixed versions
| 3.2.2 | 4.0.1 | 5.0.5 |
Sources
- osv: GHSA-c4w7-xm78-47vh
- https://nvd.nist.gov/vuln/detail/CVE-2020-7774
- https://github.com/yargs/y18n/issues/96
- https://github.com/yargs/y18n/pull/108
- https://github.com/yargs/y18n/commit/90401eea9062ad498f4f792e3fff8008c4c193a3
- https://github.com/yargs/y18n/commit/a9ac604abf756dec9687be3843e2c93bfe581f25
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://github.com/yargs/y18n
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038306
- https://snyk.io/vuln/SNYK-JS-Y18N-1021887
- https://www.oracle.com/security-alerts/cpuApr2021.html
CVE-2020-7774 · published · modified · JSON