Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-8129 EUVD-2021-0869GHSA-rhwf-hqpr-q8g2

Code Injection in script-manager

Published Feb 14, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Description

An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.

Affected products

VendorProductAffectedFixed
— script-manager Fixed version: 0.9.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm script-manager < 0.9.0 0.9.0 GHSA-rhwf-hqpr-q8g2

References