Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2020-7768

Prototype Pollution

Description

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a grpc

  • unspecified to < 1.24.4affected

n/a @grpc/grpc-js

  • unspecified to < 1.1.8affected

References