CVE-2020-7614

CVE-2020-7614 affects npm-programmatic up to version 0.0.12 and enables command injection via concatenated options passed to exec. The vulnerability enables remote code execution if untrusted input is supplied to npm-programmatic’s install/uninstall/list paths, as demonstrated by the evidence and...