CVE-2020-7608
MediumAdvisory
Published 4 Sept 2020In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.005
- 42nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 109
- of 17,781 indexed, latest versions
- Container images
- 108
- deployed by those charts
- Fix available
- 1 of 1
- affected package
yargs-parser Vulnerable to Prototype Pollution
Carried by container images the latest versions of 109 of 17,781 indexed charts deploy, on 108 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| yargs-parsernpm | 2.4.1, 3.2.0, 4.2.1, 5.0.0+6 more | 5.0.1, 13.1.2 | 108 |
- OSV records
- GHSA-p9pc-299p-vxgp
- Also known as
- SNYK-JS-YARGSPARSER-560381
Charts affected
109 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| logsmo-helm-chart | 6.0.0 | 1 of 6See more | 29,220 |
| pombasmo-helm-chart | 6.0.0 | 1 of 17See more | 29,220 |
| fdi-dotstatsuite-dlmstatcan | 0.3.1 | 1 of 1See more | 3,881 |
| pachydermstatcan | 0.5.1 | 1 of 4See more | 4,967 |
| dashkioskt3n | 2.0.0 | 1 of 1See more | 3,827 |
| joplintobiassackmann | 0.1.7 | 1 of 2See more | 5,535 |
| cadencewenerme | 0.23.0 | 1 of 5See more | 10,127 |
| temporalwenerme | 0.15.1 | 1 of 13See more | 22,665 |
| helloworldyotron-helm-charts | 0.1.0 | 1 of 1See more | 1,309 |
Container images carrying it
108 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hhaluk/ | a6555953d941 | yargs-parser | 13.1.2 | 1 |
| hyperledger/ | c65891b6c237 | yargs-parser | 13.1.2 | 1 |
| ibarreche/ | c8970ac1c8dc | yargs-parser | 13.1.2 | 1 |
| ibarreche/ | b7a08274e69f | yargs-parser | 13.1.2 | 1 |
| ibmcom/ | 240ff499eb5b | yargs-parser | 13.1.2 | 1 |
| ibmcom/ | e2a86997b36b | yargs-parser | 5.0.1 | 1 |
| ibmcom/ | 02d882f2836e | yargs-parser | 13.1.2 | 1 |
| ibmcom/ | b8e8df11072d | yargs-parser | 13.1.2 | 1 |
| ibmcom/ | b558f2b444ae | yargs-parser | 13.1.2 | 1 |
| ibmcom/ | ab3fd1fdfa18 | yargs-parser | 13.1.2 | 1 |
| ibmcom/ | ed5505e5c7ec | yargs-parser | 5.0.1 | 1 |
| ibmcom/ | e17bdccc5030 | yargs-parser | 13.1.2 | 1 |
| ibmcom/ | 0762ab1df6c1 | yargs-parser | 13.1.2 | 1 |
| interlayhq/ | 423d567d47aa | yargs-parser | 5.0.1 | 1 |
| istio/ | b6a6b88d3578 | yargs-parser | 13.1.2 | 1 |
| jayfong/ | 163e5d621910 | yargs-parser | 13.1.2 | 1 |
| joplin/ | 3f7b852959aa | yargs-parser | 13.1.2 | 1 |
| joplin/ | 52af57880c0e | yargs-parser | 13.1.2 | 1 |
| joplin/ | b87564ef34e9 | yargs-parser | 13.1.2 | 1 |
| kobotoolbox/ | bcacc01bccd4 | yargs-parser | 13.1.2 | 1 |
| koumoul/ | 7108d47be3b2 | yargs-parser | 13.1.2 | 1 |
| koumoul/ | 8eeca2e8285b | yargs-parser | 13.1.2 | 1 |
| kubesphere/ | f1b5bf878196 | yargs-parser | 13.1.2 | 1 |
| lavandadelpatio/ | 501c3f31e0bc | yargs-parser | 13.1.2 | 1 |
| markdegroot/ | d8445f2a0de6 | yargs-parser | 13.1.2 | 1 |
| matrixdotorg/ | 0d37b4d42b47 | yargs-parser | 13.1.2 | 1 |
| minddocdev/ | 6c60b11a4fa7 | yargs-parser | 13.1.2 | 1 |
| mozilla/ | 1da6ff5c4895 | yargs-parser | 13.1.2 | 1 |
| muluder/ | 43b597a93da7 | yargs-parser | 13.1.2 | 1 |
| nightscout/ | 00c3b4833f1b | yargs-parser | 13.1.2 | 1 |
| nodered/ | 070643219ea2 | yargs-parser | 13.1.2 | 1 |
| omecproject/ | 5715e5648aa0 | yargs-parser | 13.1.2 | 1 |
| openwhisk/ | b695a6ceb406 | yargs-parser | 13.1.2 | 1 |
| oryd/ | 26347ef0a2de | yargs-parser | 13.1.2 | 1 |
| pachyderm/ | 2b27f41d4d02 | yargs-parser | 13.1.2 | 1 |
| parithoshj/ | cdca426fea6d | yargs-parser | 5.0.1 | 1 |
| patrickhulce/ | 74b4b6a3954d | yargs-parser | 13.1.2 | 1 |
| siscc/ | b6f9a7c888fc | yargs-parser | 13.1.2 | 1 |
| socialmediamacroscope/ | c5095e94bc65 | yargs-parser | 5.0.1 | 1 |
| subsquid/ | a7f8b9bad7ee | yargs-parser | 5.0.1 | 1 |
| temporalio/ | 33cfa863d8ce | yargs-parser | 13.1.2 | 1 |
| testhubio/ | e86c2db53be8 | yargs-parser | 13.1.2 | 1 |
| thelounge/ | 639978459c3a | yargs-parser | 13.1.2 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | yargs-parser | 13.1.2 | 1 |
| ubercadence/ | 8564a5b44a6d | yargs-parser | 13.1.2 | 1 |
| willwill/ | d443017aae98 | yargs-parser | 13.1.2 | 1 |
| wiremind/ | e7048929a676 | yargs-parser | 13.1.2 | 1 |
| zooz/ | f491d1f7a865 | yargs-parser | 13.1.2 | 1 |
| ghcr.io/ | 0635f17c9d2c | yargs-parser | 13.1.2 | 1 |
| ghcr.io/ | e34964e336c1 | yargs-parser | 13.1.2 | 1 |