CVE-2020-7768

Publication date

2020-11-11 10:20:16

Family

snyk

State

PUBLISHED

Description

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.