Skip to content
OpenAdvisories

Package · npm

shiba

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.3
    CVE-2020-7738

    Arbitrary Code Execution

    All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().

    shiba npm
  • Medium 6.1
    CVE-2017-1000491

    Shiba vulnerable to XSS leading to code execution

    Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.

    shiba npm