PatchTheCVEyargs vulnerabilities
Recent CVEs affecting yargs products. 1 tracked.
yargs has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-03-16. Highest priority: CVE-2020-7608 (score 35/100).
- CVE-2020-7608 MEDIUM 5.3 UPGRADE yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payl
FAQ
How do I fix yargs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yargs being exploited right now?
None of the tracked yargs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yargs CVE should I patch first?
CVE-2020-7608 currently ranks highest (35/100): yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payl.