What’s Vulnerable › Vulnerabilities

CVE-2020-7644

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-04-28 · updated 2026-06-17
• Weakness: CWE-1321

Description

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

Affected products

• fun-map: through 3.3.1

References

• https://github.com/nathan7/fun-map/blob/master/index.js#L137%2C
• https://snyk.io/vuln/SNYK-JS-FUNMAP-564436
• https://github.com/nathan7/fun-map/blob/master/index.js#L137%2C
• https://snyk.io/vuln/SNYK-JS-FUNMAP-564436

Get alerted when CVE-2020-7644 or the next vulnerability affects your stack