Yargs

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Yargs records in CISA KEV

No Yargs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Yargs-parser · all components

TI-2020-06130 CVE-2020-7608 · GHSA-p9pc-299p-vxgp

LOW 25

yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00514 Published 2020-03-16 Fixed in 13.1.2, 15.0.1 +2 CWE-1321