Lucene search
AnonymousNODEJS:1713HistoryMay 18, 2021 - 1:43 a.m.
Injection and Command Injection in devcert
2021-05-1801:43:01
Anonymous
www.npmjs.com
46
0.003 Low
EPSS
Percentile
68.8%
Overview
A command injection vulnerability in the devcert module may lead to remote code execution when users of the module pass untrusted input to the certificateFor function.
Recommendation
Upgrade to version 1.1.2 or later
References
Related
cvelist
cvelist
CVE-2020-8186
2020-07-10 15:37:18
veracode
veracode
OS Command Injection
2020-06-16 08:17:49
osv
osv
Injection and Command Injection in devcert
2021-05-18 01:41:56
nvd
nvd
CVE-2020-8186
2020-07-10 16:15:11
cve
cve
CVE-2020-8186
2020-07-10 16:15:11
checkpoint_advisories
checkpoint_advisories
devcert Module Command Injection (CVE-2020-8186)
2020-08-12 00:00:00
hackerone
hackerone
prion
prion
Command injection
2020-07-10 16:15:00
github
github
Injection and Command Injection in devcert
2021-05-18 01:41:56