← All advisories

Critical severity9.8GHSA Advisory· Published Sep 1, 2020· Updated Jun 17, 2026

CVE-2020-7726

CVE-2020-7726

Description

All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
safe-object2npm	<= 1.0.3	—

Affected products

3

Lumiverse/Safe Object2GHSA
Range: <= 1.0.3
Package: https://npmjs.com/package/safe-object2
Safe Object2 Project/Safe Object2
cpe:2.3:a:safe-object2_project:safe-object2:*:*:*:*:*:node.js:*:*
ghsa-coords
pkg:npm/safe-object2
Range: <= 1.0.3

Patches

Vulnerability mechanics

References

3

snyk.io/vuln/SNYK-JS-SAFEOBJECT2-598801nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-jpq3-xf27-5jf2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7726ghsaADVISORY

News mentions

0

No linked articles in our index yet.