High severity8.1NVD Advisory· Published Apr 28, 2020· Updated Jun 17, 2026
CVE-2020-7644
CVE-2020-7644
Description
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
fun-mapnpm | <= 3.3.1 | — |
Affected products
3- fun-map/fun-mapdescription
Patches
Vulnerability mechanics
References
5- snyk.io/vuln/SNYK-JS-FUNMAP-564436nvdExploitMitigationThird Party AdvisoryWEB
- github.com/advisories/GHSA-p33m-7w7f-gmj8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-7644ghsaADVISORY
- github.com/nathan7/fun-map/blob/master/index.jsghsaWEB
- github.com/nathan7/fun-map/blob/master/index.jsnvd
News mentions
0No linked articles in our index yet.