Lucene search
GoogleOSV:CVE-2020-7629HistoryApr 02, 2020 - 10:15 p.m.
CVE-2020-7629
2020-04-0222:15:14
Google
osv.dev
4
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
| CPE | Name | Operator | Version |
|---|---|---|---|
| install-package | eq | 0.1.0 | |
| install-package | eq | 0.4.0 | |
| install-package | eq | 0.2.0 | |
| install-package | eq | 0.3.0 |
Related
osv
osv
OS Command Injection in install-package
2022-02-10 23:48:06
cvelist
cvelist
CVE-2020-7629
2020-04-02 21:38:31
prion
prion
Command injection
2020-04-02 22:15:00
cve
cve
CVE-2020-7629
2020-04-02 22:15:14
veracode
veracode
Remote Code Execution (RCE)
2020-04-06 05:37:16
github
github
OS Command Injection in install-package
2022-02-10 23:48:06
nvd
nvd
CVE-2020-7629
2020-04-02 22:15:14