CVE-2020-7720

2020-09-0110:15:10

Google

osv.dev

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.1%

JSON

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.

CPENameOperatorVersion
forgeeq0.1.14
forgeeq0.2.33
forgeeq0.2.32
forgeeq0.4.0
forgeeq0.2.13
forgeeq0.6.3
forgeeq0.1.5
forgeeq0.7.2
forgeeq0.1.2
forgeeq0.2.2