Lucene search
+L
Node-extend ProjectNode-extend

1 matches found

CVE
CVE
added 2020/06/10 3:36 p.m.69 views

CVE-2020-7673

CVE-2020-7673 affects node-extend up to version 0.2.0. The vulnerability arises in the extend(A,B,as,isAargs) function (lib/extend.js) where user input is passed to eval, enabling Arbitrary Code Execution. Affected: node-extend 0.2.0 and earlier. Impact: potential remote code execution with netwo...

9.8CVSS9.6AI score0.02512EPSS
Save