2 matches found
CVE-2020-26222
Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go. In Dependabot-Core from version 0.119.0.beta1 before version 0.125.1, there is a remote code execution vulnerability in dependabot-common and...
9.3CVSS0.03088EPSS
SaveExploits1References9
CVE-2020-26222: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go. In Dependabot-Core from version 0.119.0.beta1 before version 0.125.1, there is a remote code execution vulnerability in dependabot-common and...
8.8CVSS6.4AI score0.03088EPSS
SaveExploits1References2
20