VYPR

Npm Programmatic

by Npm Programmatic Project

CVEs (1)

  • CVE-2020-7614CriApr 7, 2020
    risk 0.64cvss 9.8epss 0.04

    npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly.