CVE-2020-8125CWE-20

CVE-2020-8125: vulnerability in klona npm module

Published · Updated

Follow this CVE+ Monitor klona npm module+ Monitor klona

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.1%
Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona.
Affected products
n/a · klona npm module