GCVE-110-MAGEIA-2021-170 — Vulnetix

GCVE-110-MAGEIA-2021-170

Advisory Published

Vulnetix · Advisory published April 2, 2021

yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload (CVE-2020-7608).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	nodejs-yargs-parser	0 (affected), 10.0.0-3.1.mga7 (unaffected), 0 (affected), 10.0.0-3.1.mga7 (unaffected)	—
Mageia	virtualbox	0 (affected), 6.1.26-1.mga8 (unaffected)	—
Mageia	kmod-virtualbox	0 (affected), 6.1.26-1.mga8 (unaffected)	—

Aliases

References

Updated nodejs-yargs-parser packages fix security vulnerability

advisory

Updated nodejs-yargs-parser packages fix security vulnerability

issue

Virtualbox 6.1.26 maintenance release

advisory

Virtualbox 6.1.26 maintenance release

issue

Virtualbox 6.1.26 maintenance release

issue

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›