CVE-2020-7623

jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...

@reduct/build-tools (>=1.4.0 <=1.5.6), docurium-json-cleaner (>=1.0.0 <=1.0.3) +9 more potentially affected by CVE-2020-7623 via jscover (>=0.1.1 <=1.0.0)

jscover NPM version =0.1.1, =1.4.0, =1.0.0, =0.0.5, =0.0.5, =0.0.10 - latest-strong-pwd-generator =1.7.1 - print-random-console-msg =1.0.2 - random-msg-printer =1.0.0 - unique-password-suggestor =1.0.2 - unittesting =0.0.1 Source cves: CVE-2020-7623 Source advisory: OSV:GHSA-C5HM-XC74-PQRG...

CVE-2020-7623

CVE-2020-7623 affects jscover up to version 1.0.0. The vulnerability is a Command Injection via the source argument, allowing arbitrary command execution. Documented impact in CVSS data indicates high/critical severity (base scores up to 9.8, network attack, no authentication required). Connected...

@reduct/build-tools (>=1.4.0 <=1.5.6), docurium-json-cleaner (>=1.0.0 <=1.0.3) +9 more potentially affected by CVE-2020-7623 via jscover (>=0.1.1 <=1.0.0)

jscover NPM version =0.1.1, =1.4.0, =1.0.0, =0.0.5, =0.0.5, =0.0.10 - latest-strong-pwd-generator =1.7.1 - print-random-console-msg =1.0.2 - random-msg-printer =1.0.0 - unique-password-suggestor =1.0.2 - unittesting =0.0.1 Source cves: CVE-2020-7623 Source advisory: SNYK:JS-JSCOVER-564250...