CVE-2020-7719

CRITICAL9.8EPSS 1.7%

Prototype Pollution in locutus

Published: 5/6/2021Modified: 3/13/2026

Description

All versions of package locutus prior to version 2.0.12 are vulnerable to Prototype Pollution via the php.strings.parse_str function.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (5)