Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-7774
7.3
HIGHCVSS v3
Severity scale
010
Description
The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.
y18n
NPMthe bare-bones internationalization library used by yargs
NPMthe bare-bones internationalization library used by yargs>= 5.0.0, < 5.0.5, < 3.2.2, = 4.0.0, >= 4.0.0, < 4.0.1NVD
yargs/y18n
GitHub:ledger: the bare-bones i18n library used by yargs
GitHub:ledger: the bare-bones i18n library used by yargs>= 5.0.0, < 5.0.5, < 3.2.2, = 4.0.0, >= 4.0.0, < 4.0.1NVD