Skip to content
OpenAdvisories

Package · npm

summit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2017-16020

    Unsafe eval() in summit allows arbitrary code execution

    Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.

    HackerOne summit node module summit npm