Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-8137 EUVD-2021-1007GHSA-7vm7-j8p7-h346

Code injection in blamer

Published Mar 20, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Description

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.

Affected products

VendorProductAffectedFixed
— blamer Fixed Version: 1.0.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm blamer < 1.0.1 1.0.1 GHSA-7vm7-j8p7-h346

References