Lucene search
GoogleOSV:GHSA-JVF4-G24P-2QGWHistoryMay 10, 2021 - 6:37 p.m.
Arbitrary Code Execution in shiba
2021-05-1018:37:34
Google
osv.dev
9
shiba
arbitrary code execution
security vulnerability
js-yaml
safeload
EPSS
0.001
Percentile
44.5%
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
Related
veracode
veracode
Arbitrary Code Execution
2020-10-05 01:20:59
cve
cve
CVE-2020-7738
2020-10-02 10:15:13
prion
prion
Code injection
2020-10-02 10:15:00
cvelist
cvelist
CVE-2020-7738 Arbitrary Code Execution
2020-10-02 10:05:13
nvd
nvd
CVE-2020-7738
2020-10-02 10:15:13
github
github
Arbitrary Code Execution in shiba
2021-05-10 18:37:34