CVE-2020-7640
pixl-class prior to 1.0.3 allows execution of arbitrary commands. The members argument of the create function can be controlled by users without any sanitization.
CVSS 3.1 · 9.8 Critical
EPSS 2.1%
KEV · Not listed
Vendors
Products