Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-7794 EUVD-2021-0486GHSA-487w-pqcm-63hq

Command Injection

Published Jan 8, 2021 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule).

Affected products

VendorProductAffectedFixed
— buns < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm buns <= 1.1.6 — GHSA-487w-pqcm-63hq

References