FlawAtlas
Search the atlas
CVE-2020-7774 Critical

CVE-2020-7774

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

Exploit probability 69.1%
Published November 17, 2020
Required by Not available
Last source change August 15, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

15 explicit affected versions

npm y18n

1 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2020-7774

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

View original source
Open Source Vulnerabilities GHSA-c4w7-xm78-47vh

### Overview The npm package `y18n` before versions 3.2.2, 4.0.1, and 5.0.5 is vulnerable to Prototype Pollution. ### POC ```js const y18n = require('y18n')(); y18n.setLocale('__proto__'); y18n.updateLocale({polluted: true}); console.log(polluted); // true ``` ### Recommendation Upgrade to version 3.2.2, 4.0.1, 5.0.5 or later.

View original source

05 / REFERENCES

Further evidence