CVE-2020-7719

Published September 1st, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.

locutusjs/locutus

Bringing stdlibs of other programming languages to TypeScript for fun

GitHub

3.77K