p PatchFirst

CVE-2020-7719

CVE-2020-7719 · Prototype Pollution

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.

CVSS 9.8 · Critical · EPSS 2.8% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • locutus

    Versions
    • ≥ 0, < unspecified: Affected (custom)

    No fix published

  • locutus npm

    Affected ranges
    • SEMVER: < 2.0.12

    Update to 2.0.12

Original sources

Check your server →