Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-7608
5.3
MEDIUMCVSS v3
Severity scale
010
Description
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.
@types/yargs-parser
NPMTypeScript definitions for yargs-parser
NPMTypeScript definitions for yargs-parser>= 14.0.0, < 15.0.1, = *, >= 16.0.0, < 18.1.1, < 5.0.1, >= 6.0.0, < 13.1.2NVD
yargs-parserNPMthe mighty option parser used by yargs
NPMthe mighty option parser used by yargs>= 14.0.0, < 15.0.1, = *, >= 16.0.0, < 18.1.1, < 5.0.1, >= 6.0.0, < 13.1.2NVD
GitHub