CVE-2020-7774: Oracle Graalvm

Critical severity, CVSS 9.8. EPSS: 69.4% chance of exploitation in the next 30 days.

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

Affected products

• Oracle Graalvm: version 19.3.5 only; version 20.3.1.2 only; version 21.0.0.2 only
• Siemens Sinec Infrastructure Network Services: before 1.0.1.1 (fixed in 1.0.1.1)
• y18n Project y18n: before 3.2.2 (fixed in 3.2.2); from 5.0.0, before 5.0.5 (fixed in 5.0.5); version 4.0.0 only

Published 2020-11-17. Last modified 2026-06-17.