CVE-2020-4066

Limdu prior to version 0.95 contains a command injection vulnerability in the trainBatch function. This affects users of Limdu’ s Node.js machine learning framework that rely on shell-executed components (e.g., SVM-related tools). The issue can enable an attacker to execute arbitrary OS commands ...