VULNERABILITY INTELLIGENCE

CVE-2020-7707

CVSS score9.8 CRITICAL

EPSS probability3.38%

CISA KEVNot currently listed

Published2020-08-18

Last modified2026-06-17

Description

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.