← All advisories

Critical severity9.8NVD Advisory· Published May 15, 2020· Updated Jun 17, 2026

CVE-2020-8149

CVE-2020-8149

Description

Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
logkittynpm	< 0.7.1	0.7.1

Affected products

2

npm/logkittydescription
ghsa-coords
pkg:npm/logkitty
Range: < 0.7.1

Patches

Vulnerability mechanics

References

5

hackerone.com/reports/825729nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-v8v8-6859-qxm4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-8149ghsaADVISORY
github.com/zamotany/logkitty/commit/ef2f673e25c629544dd3de6429999318447dd6bfghsaWEB
github.com/zamotany/logkitty/pull/18ghsaWEB

News mentions

0

No linked articles in our index yet.