CVE-2020-7614 | BDVDB-2026-133608 Detail

npm-programmatic

Description#

npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://snyk.io/vuln/SNYK-JS-NPMPROGRAMMATIC-564115
https://github.com/Manak/npm-programmatic/blob/master/index.js#L18

Exploit#

No public exploit known

History#

Version 12020-04-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.