CVE-2020-7774

Source
https://cve.org/CVERecord?id=CVE-2020-7774
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7774.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-7774
Aliases
Downstream
ALPINE (1)
BELL (1)
CLEANSTART (14)
CLSA (1)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (9)
RHSA (6)
RLSA (3)
ROOT (1)
SUSE (8)
UBUNTU (1)
Related
Published
2020-11-17T13:15:12Z
Modified
2026-09-30T11:45:41Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

Database specific
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "fixed":  "1.0.1.1"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "siemens:sinec_infrastructure_network_services"
        },
        {
            "cpes":  [
                "cpe:2.3:a:y18n_project:y18n:*:*:*:*:*:node.js:*:*"
            ],
            "extracted_events":  [
                {
                    "fixed":  "3.2.2"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "y18n_project:y18n"
        }
    ]
}
References

Affected packages

Git / github.com/graalvm/graalvm-ce-builds

Affected ranges

Type
GIT
Repo
https://github.com/graalvm/graalvm-ce-builds
Events
Database specific
Show details
{
    "cpe":  [
        "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "19.3.5"
        },
        {
            "last_affected":  "19.3.5"
        },
        {
            "introduced":  "20.3.1.2"
        },
        {
            "last_affected":  "20.3.1.2"
        },
        {
            "introduced":  "21.0.0.2"
        },
        {
            "last_affected":  "21.0.0.2"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

19.*
19.3.5
20.*
20.3.1.2
21.*
21.0.0.2
vm-19.*
vm-19.3.5
vm-20.*
vm-20.3.1
vm-21.*
vm-21.0.0
vm-21.0.0.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7774.json"

Git / github.com/yargs/y18n

Affected ranges

Type
GIT
Repo
https://github.com/yargs/y18n
Events
Database specific
Show details
{
    "cpe":  [
        "cpe:2.3:a:y18n_project:y18n:*:*:*:*:*:node.js:*:*",
        "cpe:2.3:a:y18n_project:y18n:4.0.0:*:*:*:*:node.js:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "5.0.0"
        },
        {
            "fixed":  "5.0.5"
        },
        {
            "introduced":  "4.0.0"
        },
        {
            "last_affected":  "4.0.0"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

4.*
4.0.0
v4.*
v4.0.0
v5.*
v5.0.0
v5.0.1
v5.0.2
v5.0.3
v5.0.4
v5.0.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7774.json"