{"action":"Upgrade linux-cmdline to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"linux-cmdline","cve_ids":["CVE-2020-7704"],"ecosystem":"npm","epss":0.02704,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-2c29-wc65-4cx9","id":"tcs_01M5KESQH77F0V6FCYHC77PV0J","modified_at":"2026-07-08T06:49:51.400756871Z","published_at":"2022-05-24T17:26:04Z","references":["https://osv.dev/vulnerability/GHSA-2c29-wc65-4cx9","https://nvd.nist.gov/vuln/detail/CVE-2020-7704","https://github.com/piranna/linux-cmdline/commit/53c61a88bc47eb25d71832205056beaab95cf677","https://github.com/piranna/linux-cmdline","https://snyk.io/vuln/SNYK-JS-LINUXCMDLINE-598674"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2c29-wc65-4cx9","url":"https://osv.dev/vulnerability/GHSA-2c29-wc65-4cx9"}],"summary":"linux-cmdline is vulnerable to Prototype Pollution via the constructor"}