CVE-2020-4988: IBM Loopback

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Loopback 8.0.0 contains a vulnerability that could allow an attacker to manipulate or pollute Javascript values and cause a denial of service or possibly execute code. IBM X-Force ID: 192706.

Affected products

• IBM Loopback: version 8.0.0 only

Published 2020-12-21. Last modified 2026-06-17.