CVE-2020-7736

Description

The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.

Affected packages (1)

• npm/bmoorfrom 0, < 0.8.12

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-7736
• PATCHhttps://github.com/b-heilman/bmoor
• WEBhttps://github.com/b-heilman/bmoor/commit/7d4a086a1dc3ef11ed0b323824d02348734b7da5
• WEBhttps://snyk.io/vuln/SNYK-JS-BMOOR-598664
• WEBhttps://www.npmjs.com/package/bmoor