HOMEVULNERABILITIESVENDORSNode-rules Project

Node-rules ProjectCVEs & Vulnerabilities

1 CVEs affecting Node-rules Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

node-rules 1
CVE-2020-7609CRITICAL

node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fromJSON()" can be controlled by users without any sanitization.

28 Apr 2020
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Node-rules Project CVEs & Vulnerabilities — 1 Tracked