9.8
Critical
CVE-2020-7707 The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function
Description
The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| property-expr 2.0 | earliest → < 2.0.3 | 2.0.3 |