NodeJS/phpjs/1.3.2

php.js offers community built php functions in javascript

Repo Link: https://www.npmjs.com/package/phpjs
License: UNKNOWN

1 Security Vulnerabilities

Prototype Pollution in phpjs

Published date: 2021-05-06T17:28:46Z

CVE: CVE-2020-7700

Links:

https://nvd.nist.gov/vuln/detail/CVE-2020-7700
https://github.com/advisories/GHSA-m428-jqc4-2p5j
https://snyk.io/vuln/SNYK-JS-PHPJS-598681

All versions of phpjs up to and including 1.3.2 are vulnerable to Prototype Pollution via parse_str. phpjs is no longer maintained and users are advised to use Locutus as a replacement (https://github.com/locutusjs/locutus)

Affected versions: ["0.0.1", "1.0.0", "1.0.1", "1.0.2", "1.1.2", "1.2.2", "1.3.2"]

Secure versions: []

7 Other Versions

Version	License	Security	Released
1.3.2	UNKNOWN	1	2014-03-05 - 09:20	about 10 years
1.2.2	UNKNOWN	1	2014-03-04 - 10:45	about 10 years
1.1.2	UNKNOWN	1	2014-03-04 - 10:43	about 10 years
1.0.2	UNKNOWN	1	2014-01-17 - 16:22	over 10 years
1.0.1	UNKNOWN	1	2014-01-17 - 16:14	over 10 years
1.0.0	UNKNOWN	1	2014-01-17 - 16:07	over 10 years
0.0.1	UNKNOWN	1	2012-06-01 - 13:01	almost 12 years