Install Package

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-7629 npm CRITICAL POC Act Now

install-package through 0.4.0 is vulnerable to Command Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Install Package

NVD GitHub

CVSS 3.1

9.8

EPSS

4.1%

CVE-2020-7628 npm CRITICAL Act Now

umount through 1.1.6 is vulnerable to Command Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Install Package Umount

NVD

CVSS 3.1

9.8

EPSS

1.7%

CVE-2020-7629 npm

EPSS 4% CVSS 9.8

CRITICAL POC Act Now

Command Injection Install Package

NVD GitHub

CVE-2020-7628 npm

EPSS 2% CVSS 9.8

CRITICAL Act Now

Command Injection Install Package Umount

NVD