CVE-2020-7719: Locutus

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.

Affected products

• Locutus Locutus: before 2.0.12 (fixed in 2.0.12)

Published 2020-09-01. Last modified 2026-06-17.