npm package
heroku-addonpool
pkg:npm/heroku-addonpool
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-7634 | Cri | 9.8 | < 0.1.16 | 0.1.16 | Apr 6, 2020 | heroku-addonpool through 0.1.15 is vulnerable to Command Injection. |
- affected < 0.1.16fixed 0.1.16
heroku-addonpool through 0.1.15 is vulnerable to Command Injection.