← All advisories

Critical severity9.8NVD Advisory· Published Aug 17, 2020· Updated Jun 17, 2026

CVE-2020-7704

CVE-2020-7704

Description

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
linux-cmdlinenpm	< 1.0.1	1.0.1

Affected products

3

Linux Cmdline Project/Linux Cmdline
cpe:2.3:a:linux-cmdline_project:linux-cmdline:*:*:*:*:*:*:*:*
Range: <1.0.1
linux-cmdline/linux-cmdlinedescription
ghsa-coords
pkg:npm/linux-cmdline
Range: < 1.0.1

Patches

Vulnerability mechanics

References

4

github.com/piranna/linux-cmdline/commit/53c61a88bc47eb25d71832205056beaab95cf677nvdPatchThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-LINUXCMDLINE-598674nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-2c29-wc65-4cx9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7704ghsaADVISORY

News mentions

0

No linked articles in our index yet.