Prototype Pollution via loadPackageDefinition in gRPC and @grpc/grpc-js packages (versions before 1.24.4 and 1.1.8 respectively)

CVE-2020-7768

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.

Learn more about our Web Application Penetration Testing UK.