Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-7720
9.8
CRITICALCVSS v3
Severity scale
010
Description
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.
node-forge
NPMJavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.
NPMJavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.< 0.10.0OSV
digitalbazaar/forge
GitHubA native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
GitHubA native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps< 0.10.0NVD