CVE-2020-4059

In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This vulnerability is patched by version 2.0.0. Previous releases are deprecated in npm. As a workaround,...

CVE-2020-4059: Improper Neutralization of Special Elements used in a Command

In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This vulnerability is patched by version 2.0.0. Previous releases are deprecated in npm. As a workaround,...

PT-2020-17855

Name of the Vulnerable Software and Affected Versions mversion versions prior to 2.0.0 Description This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. The vulnerability is related to a command injection issue. To mitigate this,...