Skip to content
OpenAdvisories

Product · HackerOne

summit node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2017-16020

    Unsafe eval() in summit allows arbitrary code execution

    Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.

    HackerOne summit node module summit npm