← All advisories

Critical severity9.8NVD Advisory· Published Aug 18, 2020· Updated Jun 17, 2026

CVE-2020-7706

CVE-2020-7706

Description

The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
connie-langnpm	< 0.1.1	0.1.1

Affected products

3

Connie Lang Project/Connie Lang
cpe:2.3:a:connie-lang_project:connie-lang:*:*:*:*:*:*:*:*
Range: <0.1.1
connie-lang/connie-langdescription
ghsa-coords
pkg:npm/connie-lang
Range: < 0.1.1

Patches

Vulnerability mechanics

References

4

github.com/mattinsler/connie-lang/commit/ef376d404c712dd28309ba07f28a8f87f24a015anvdPatchThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-CONNIELANG-598853nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-8vv3-jxm8-f4vfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7706ghsaADVISORY

News mentions

0

No linked articles in our index yet.