{"id":"CVE-2020-7608","aliases":["GHSA-p9pc-299p-vxgp","SNYK-JS-YARGSPARSER-560381"],"url":"https://o3.security/vulnerability/CVE-2020-7608","summary":"yargs-parser Vulnerable to Prototype Pollution","details":"yargs-parser could be tricked into adding or modifying properties of Object.prototype using a \"__proto__\" payload.","published":"2020-03-16T20:15:12.860Z","modified":"2026-07-08T06:49:37.726276553Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"yargs-parser","fixedVersion":"13.1.2"},{"ecosystem":"npm","name":"yargs-parser","fixedVersion":"15.0.1"},{"ecosystem":"npm","name":"yargs-parser","fixedVersion":"18.1.1"},{"ecosystem":"npm","name":"yargs-parser","fixedVersion":"5.0.1"}],"fix":null,"references":[{"type":"FIX","url":"https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T06:49:37.726276553Z"}}