CVE Vulnerabilities

CVE-2020-7702

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Published: Aug 17, 2020 | Modified: Jun 17, 2026
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

All versions of package templ8 are vulnerable to Prototype Pollution via the parse function.

Weakness

The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

Affected Software

NameVendorStart VersionEnd Version
Templ8Templ8_project- (including)- (including)

Potential Mitigations

References