What is GHSA-h3rx-g5c9-8q4x?

GHSA-h3rx-g5c9-8q4x is a security advisory published by GitHub Security Advisories with High severity. Prototype Pollution in bmoor

Which CVE IDs does GHSA-h3rx-g5c9-8q4x cover?

GHSA-h3rx-g5c9-8q4x covers the following CVE IDs: CVE-2020-7736. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h3rx-g5c9-8q4x?

GHSA-h3rx-g5c9-8q4x has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

Which products are affected by GHSA-h3rx-g5c9-8q4x?

GHSA-h3rx-g5c9-8q4x affects 1 product, including: npm/bmoor:\u003c 0.8.12.

GHSA-h3rx-g5c9-8q4xHighCVSS 7.3

Prototype Pollution in bmoor

Vendor

GitHub Security Advisories

Published

May 10, 2021

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2020-7736 →

📋 Description

The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.

🎯 Affected products1

npm/bmoor:< 0.8.12

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-7736
https://github.com/b-heilman/bmoor/commit/7d4a086a1dc3ef11ed0b323824d02348734b7da5
https://snyk.io/vuln/SNYK-JS-BMOOR-598664
https://www.npmjs.com/package/bmoor
https://github.com/advisories/GHSA-h3rx-g5c9-8q4x