← Back to browse · API

CVE-2020-7708

Severity
CRITICAL
CVSS
9.8
EPSS
0.02821
Risk score
40.19
CISA KEV
No
PoC
No
Published
2020-08-18
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2021-1112, GHSA-J7CG-H9V9-6VQP
Products
n/a:@irrelon/path unspecified <4.7.0, n/a:irrelon-path unspecified <4.7.0
Sources
euvd EUVD-2021-1112

Description

The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.

References