yargs/yargs-parser

yargs/yargs-parser

GitHubGitHub
GitHubgithub.com
yargs.js.orgyargs.js.org
Releases96
Frequency1 month 5 days
Last Release
Stars517
:muscle: the mighty option parser used by yargs
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2020-7608NVD↗
>= 14.0.0, < 15.0.1, = *, >= 16.0.0, < 18.1.1, < 5.0.1, >= 6.0.0, < 13.1.25.3 MEDIUM4.6 MEDIUM

yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.