Arbitrary Code Execution

2021-01-1406:16:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

64.9%

JSON

buns is vulnerable to arbitrary code execution. An attacker is able to exploit the vulnerability by injecting command via the install function due to the insecure usage of exec

CPENameOperatorVersion
bunsle1.1.6

CPE	Name	Operator	Version
	buns	le	1.1.6

References

github.com/advisories/GHSA-487w-pqcm-63hq

www.npmjs.com/advisories/1602

0.002 Low

EPSS

Percentile

64.9%

JSON

Related for VERACODE:28992