← All advisories

Critical severity9.8NVD Advisory· Published Apr 2, 2020· Updated Jun 17, 2026

CVE-2020-7625

CVE-2020-7625

Description

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
op-browsernpm	<= 1.0.9	—

Affected products

3

Op Browser Project/Op Browser
cpe:2.3:a:op-browser_project:op-browser:*:*:*:*:*:node.js:*:*
Range: <=1.0.6
op-browser/op-browserdescription
ghsa-coords
pkg:npm/op-browser
Range: <= 1.0.9

Patches

Vulnerability mechanics

References

7

snyk.io/vuln/SNYK-JS-OPBROWSER-564259nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-3hq6-rmv7-39vhghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7625ghsaADVISORY
github.com/hiproxy/open-browser/blob/master/lib/index.jsghsaWEB
github.com/hiproxy/open-browser/pull/3ghsaWEB
github.com/hiproxy/open-browser/pull/4ghsaWEB
github.com/hiproxy/open-browser/blob/master/lib/index.jsnvd

News mentions

0

No linked articles in our index yet.