Filtered by vendor Node-extend Project Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-7673 1 Node-extend Project 1 Node-extend 2024-08-04 9.8 Critical
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument `A` of `extend` function`(A,B,as,isAargs)` located within `lib/extend.js` is executed by the `eval` function, resulting in code execution.