CVE-2020-7765

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p45

Published

Nov 16, 2020 (Nov 16, 2020)

Modified

Jun 17, 2026

Description

This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.

Vendors: google
Products: firebase\/util
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.