{"action":"Upgrade yargs-parser to 5.0.1 or later.","affected":[{"fixed":"13.1.2","introduced":"6.0.0"},{"fixed":"15.0.1","introduced":"14.0.0"},{"fixed":"18.1.1","introduced":"16.0.0"},{"fixed":"5.0.1","introduced":"0"}],"component":"yargs-parser","cve_ids":["CVE-2020-7608"],"ecosystem":"npm","epss":0.00514,"exploited":false,"fixed_versions":["13.1.2","15.0.1","18.1.1","5.0.1"],"ghsa_id":"GHSA-p9pc-299p-vxgp","id":"tcs_01M5KG3745ZHSEE49QAHTXZQV5","modified_at":"2026-07-08T06:49:37.726276553Z","published_at":"2020-09-04T18:00:54Z","references":["https://osv.dev/vulnerability/GHSA-p9pc-299p-vxgp","https://nvd.nist.gov/vuln/detail/CVE-2020-7608","https://github.com/yargs/yargs-parser/commit/1c417bd0b42b09c475ee881e36d292af4fa2cc36","https://github.com/yargs/yargs-parser/commit/63810ca1ae1a24b08293a4d971e70e058c7a41e2","https://github.com/yargs/yargs-parser","https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381","https://www.npmjs.com/advisories/1500"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-p9pc-299p-vxgp","url":"https://osv.dev/vulnerability/GHSA-p9pc-299p-vxgp"}],"summary":"yargs-parser Vulnerable to Prototype Pollution"}