← All advisories

High severity7.5OSV Advisory· Published Sep 18, 2020· Updated Jun 17, 2026

CVE-2020-8237

CVE-2020-8237

Description

Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
json-bigintnpm	< 1.0.0	1.0.0

Affected products

2

Sidorares/JSON BigintOSV
Range: v0.0.2, v0.0.3, v0.1.0, …
ghsa-coords
pkg:npm/json-bigint
Range: < 1.0.0

Patches

Vulnerability mechanics

References

3

hackerone.com/reports/916430nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-wgfq-7857-4jccghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-8237ghsaADVISORY

News mentions

0

No linked articles in our index yet.