CVE-2020-7736

The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.

• CWE-1321

• https://github.com/b-heilman/bmoor/commit/7d4a086a1dc3ef11ed0b323824d02348734b7da5Patch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-BMOOR-598664Exploit, Third Party Advisory
• https://github.com/b-heilman/bmoor/commit/7d4a086a1dc3ef11ed0b323824d02348734b7da5Patch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-BMOOR-598664Exploit, Third Party Advisory

Published

Oct 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7729The package grunt before 1.3.0 are vulnerable to Arbitrary C…7.1
• CVE-2020-7730The package bestzip before 2.1.7 are vulnerable to Command I…9.8
• CVE-2020-7731This affects all versions <0.7.0 of package github.com/russe…7.5
• CVE-2020-7733The package ua-parser-js before 0.7.22 are vulnerable to Reg…7.5
• CVE-2020-7734All versions of package cabot are vulnerable to Cross-site S…8.2
• CVE-2020-7735The package ng-packagr before 10.1.1 are vulnerable to Comma…6.6
• CVE-2020-7737All versions of package safetydance are vulnerable to Protot…9.8
• CVE-2020-7738All versions of package shiba are vulnerable to Arbitrary Co…8.3
• CVE-2020-7739This affects all versions of package phantomjs-seo. It is po…8.2
• CVE-2020-7740This affects all versions of package node-pdf-generator. Due…8.2
• CVE-2020-7741This affects the package hellojs before 1.18.6. The code get…9.9
• CVE-2020-7742This affects the package simpl-schema before 1.10.2.7.5