CVE-2020-27637

2021-01-1200:00:00

mitre

www.cve.org

r programming language

cran

path traversal

vulnerability

server compromise

package manager

update

AI Score

9.7

Confidence

High

EPSS

0.007

Percentile

80.9%

JSON

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages() function from the interpreter. Update to version 4.0.3