← All advisories

High severity8.4NVD Advisory· Published Jul 1, 2020· Updated Jun 17, 2026

CVE-2020-7688

CVE-2020-7688

Description

The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mversionnpm	< 2.0.1	2.0.1

Affected products

2

Mversion Project/Mversion
cpe:2.3:a:mversion_project:mversion:*:*:*:*:*:*:*:*
Range: <2.0.1
ghsa-coords
pkg:npm/mversion
Range: < 2.0.1

Patches

Vulnerability mechanics

References

5

github.com/mikaelbr/mversion/commit/b7a8b32600e60759a7ad3921ec4a2750bf173482nvdPatchThird Party AdvisoryWEB
github.com/418sec/huntr/pull/102nvdExploitThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-MVERSION-573174nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-6m8p-4fxj-pgc2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7688ghsaADVISORY

News mentions

0

No linked articles in our index yet.