install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2020-04-02T21:38:31
Updated: 2024-08-04T09:33:19.988Z
Reserved: 2020-01-21T00:00:00
Link: CVE-2020-7629
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-04-02T22:15:14.050
Modified: 2024-11-21T05:37:30.087
Link: CVE-2020-7629
Redhat
No data.