CVE-2020-7600: Querymen Project Querymen

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.

Affected products

• Querymen Project Querymen: before 2.1.4 (fixed in 2.1.4)

Published 2020-03-12. Last modified 2026-06-17.