Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2020-7608

yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.

VectorLOCAL

PublishedMar 16, 2020, 20:15

Published Byreport@snyk.io

Base Score

Score5.3

Package (Ecosystem)IntroducedFixedLimit

yargs-parser(npm)6.0.013.1.2N/A

yargs-parser(npm)14.0.015.0.1N/A

yargs-parser(npm)16.0.018.1.1N/A

yargs-parser(npm)05.0.1N/A

CWE-1321

Base Score

5.3

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL