Lucene search
Veracode Vulnerability DatabaseVERACODE:25060HistoryApr 24, 2020 - 1:02 a.m.
OS Command Injection
2020-04-2401:02:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.008 Low
EPSS
Percentile
82.1%
npm-programmatic is vulnerable to OS command injection. The packages and option properties are concatenated and directly passed to an exec function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| npm-programmatic | le | 0.0.11 |
Related
cve
cve
CVE-2020-7614
2020-04-07 14:15:14
nodejs
nodejs
Command Injection
2020-04-09 19:34:59
osv
osv
Command Injection in npm-programmatic
2020-04-23 20:09:09
Command Injection in standard-version
2020-07-13 21:34:59
nvd
nvd
CVE-2020-7614
2020-04-07 14:15:14
github
github
Command Injection in npm-programmatic
2020-04-23 20:09:09
Command Injection in standard-version
2020-07-13 21:34:59
prion
prion
Command injection
2020-04-07 14:15:00
cvelist
cvelist
CVE-2020-7614
2020-04-07 13:21:05