CVE-2020-7788
1 advisory.
npm/ini CVE-2020-7788: high 7.3, EPSS 3.65%
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
Action: Upgrade ini to 1.3.6 or later.
npm i ini@1.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.6 | - |
Fixed versions
| 1.3.6 |
Sources
- osv: GHSA-qqgx-2p2h-9c37
- https://nvd.nist.gov/vuln/detail/CVE-2020-7788
- https://github.com/npm/ini/commit/56d2805e07ccd94e2ba0984ac9240ff02d44b6f1
- https://github.com/npm/ini
- https://lists.debian.org/debian-lts-announce/2020/12/msg00032.html
- https://snyk.io/vuln/SNYK-JS-INI-1048974
- https://www.npmjs.com/advisories/1589
CVE-2020-7788 · published · modified · JSON