Lucene search

K
osvGoogleOSV:GHSA-WH69-WC6Q-7888
HistoryMay 28, 2020 - 6:42 p.m.

Command injection in node-dns-sync

2020-05-2818:42:59
Google
osv.dev
10

0.009 Low

EPSS

Percentile

83.0%

dns-sync through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input.

CPENameOperatorVersion
dns-synclt0.2.1

0.009 Low

EPSS

Percentile

83.0%