Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-7688

Command Injection

The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Mversion Project
Products
Mversion
CVE-2020-4059

Command Injection in mversion

In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This vulnerability is patched by version 2.0.0. Previous releases are deprecated in npm. As a workaround, make sure to escape git commit messages when using the commitMessage option for the update function.

CVSS 3.1 · 7.3 High EPSS 2.6% KEV · Not listed
Vendors
Mversion Project
Products
Mversion