CVE-2020-28445

🗓️ 25 Jul 2022 14:10:11Reported by snykType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 38 Views

Vulnerability in npm-help package, injection in export.latestVersion() function

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-28445	25 Jul 202218:39	–	circl
CNNVD	npm-help 命令注入漏洞	25 Jul 202200:00	–	cnnvd
Cvelist	CVE-2020-28445 Command Injection	25 Jul 202214:10	–	cvelist
EUVD	EUVD-2020-20886	7 Oct 202500:30	–	euvd
NVD	CVE-2020-28445	25 Jul 202214:15	–	nvd
Prion	Design/Logic Flaw	25 Jul 202214:15	–	prion
Positive Technologies	PT-2022-8897 · Npm · Npm-Help	25 Jul 202200:00	–	ptsecurity
Snyk	Command Injection	26 Jan 202110:24	–	snyk
Veracode	Command Injection	26 Jul 202205:54	–	veracode

NVD

Node

npm-help_project npm-helpnode.js

[
  {
    "product": "npm-help",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]