GitHub Advisoryadvisory · npm

GHSA-7vm7-j8p7-h346 Code injection in blamer

HIGH Published 2021-05-06 Modified 2021-05-04 Official page ↗

Aliases: CVE-2020-8137
Ecosystem: npm
Packages: blamer
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-94
Reviewed: 2021-05-04

Affected packages

• npm blamer: < 1.0.1 → fixed in 1.0.1

Description

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.

Related

Alias · CVE (1)

CVE-2020-8137 Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an… vulnerability

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

References