← Back to browse
·
API
CVE-2020-7724
Severity
CRITICAL
CVSS
9.8
EPSS
0.01916
Risk score
39.87
CISA KEV
No
PoC
No
Published
2020-09-01
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2021-0947, GHSA-4Q97-FH3F-J294
Products
n/a:tiny-conf 0 <unspecified
Sources
euvd
EUVD-2021-0947
Description
All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-0947
https://snyk.io/vuln/SNYK-JS-TINYCONF-598792