Security Advisory

CVE-2020-7708

9.8
CRITICAL

Vulnerability Description

The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.
Published Date August 18, 2020
Official Source NIST NVD Advisory