Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2020-7795

Published: 02/08/2022 Updated: 05/08/2022
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Get-npm-package-version Project

Vulnerability Summary

The package get-npm-package-version prior to 1.0.7 are vulnerable to Command Injection via main function in index.js.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

get-npm-package-version project get-npm-package-version

References

CWE-77https://www.npmjs.com/package/get-npm-package-version/v/1.0.6https://security.snyk.io/vuln/SNYK-JS-GETNPMPACKAGEVERSION-1050390https://github.com/hoperyy/get-npm-package-version/commit/40b1cf31a0607ea66f9e30a0c3af1383b52b2dechttps://github.com/hoperyy/get-npm-package-version/blob/338a5882298eb2c2194538db41166cae13c39e03/index.js%23L17https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook