CVE-2020-7719 Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function

Description

Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.

Affected products and versions

Product	Affected versions	Fixed in
locutus	Versions not published

Other CVEs of locutus

The 2 CVEs of locutus →

CVE-2021-23392 The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir… 5.3 Medium