Lucene search
+L
Bestzip ProjectBestzip

1 matches found

CVE
CVE
added 2020/09/04 9:30 a.m.69 views

CVE-2020-7730

CVE-2020-7730 affects the npm package bestzip prior to version 2.1.7, which is vulnerable to Command Injection via the options parameter. The vulnerability is described across multiple sources (NVD/NVDC, OSV, GitHub advisories, and npm advisories) with a high-severity impact (CVSS v3.1: CRITICAL,...

9.8CVSS9.7AI score0.03145EPSS
Save