CVE-2020-7605

2020-03-1522:15:14

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.9%

JSON

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of ‘gulp-tape’ options.

CPENameOperatorVersion
gulp-tapeeq0.0.9
gulp-tapeeq0.0.8
gulp-tapeeq0.0.2
gulp-tapeeq0.0.11
gulp-tapeeq0.0.7
gulp-tapeeq0.0.3
gulp-tapeeq0.0.5
gulp-tapeeq0.0.6
gulp-tapeeq0.0.4
gulp-tapeeq0.0.10

Name	Operator	Version
gulp-tape	eq	0.0.9
gulp-tape	eq	0.0.8
gulp-tape	eq	0.0.2
gulp-tape	eq	0.0.11
gulp-tape	eq	0.0.7
gulp-tape	eq	0.0.3
gulp-tape	eq	0.0.5
gulp-tape	eq	0.0.6
gulp-tape	eq	0.0.4
gulp-tape	eq	0.0.10