Property-expr Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Property-expr Project records in CISA KEV

No Property-expr Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Property-expr · all components

TI-2020-06227 CVE-2020-7707 · GHSA-6fw4-hr69-g3rv

MEDIUM 48

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03376 Published 2020-08-18 Fixed in 2.0.3 CWE-1321