1 matches found
Unsafe eval()
Overview Affected versions of summit allow attackers to execute arbitrary commands via collection names when using the PouchDB driver. Recommendation No direct patch is available at this time. Currently, the best option to mitigate the issue is to avoid using the PouchDB driver, as the package...
7.5CVSS6.3AI score0.02497EPSS
SaveExploits0Affected Software1
20