Malicious code in bunyan-commitlint-upgrade-start (npm)

The package bunyan-commitlint-upgrade-start was found to contain malicious code...

CVE-2020-25755

An issue was discovered on Enphase Envoy R3.x and D4.x and other current devices. The upgradestart function in /installer/upgradestart allows remote authenticated users to execute arbitrary commands via the force parameter...