CVE-2020-8268

HIGH · CVSS 7.5 EPSS 1.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-8268

Severity

HIGH

CVSS

7.5

EPSS

1.28%

Original NVD Description

Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify methods and properties of the global object constructor.