HOMEVULNERABILITIESVENDORSNode-extend Project

Node-extend ProjectCVEs & Vulnerabilities

1 CVEs affecting Node-extend Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

node-extend 1
CVE-2020-7673CRITICAL

node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument `A` of `extend` function`(A,B,as,isAargs)` located within `lib/extend.js` is executed by the `eval` function, resulting in code execution.

10 Jun 2020
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Node-extend Project CVEs & Vulnerabilities — 1 Tracked