Skip to content

Product

npm json8 vulnerabilities

1 published CVE affecting npm json8, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm json8 CVEs

Newest publication first

  1. CVE-2020-7770 Prototype Pollution

    Published
    CriticalCVSS 9.8 EPSS 1.9%

    This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype pollution.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.