VULNERABILITY INTELLIGENCE

CVE-2020-7638

CVSS score5.3 MEDIUM

EPSS probability1.02%

CISA KEVNot currently listed

Published2020-04-06

Last modified2026-06-17

Description

confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.