npm/fs-path CVE-2020-8298: critical 9.8, EPSS 11.17%
Command injection in fs-path
Action: Upgrade fs-path to 0.0.25 or later.
npm i fs-path@0.0.25Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.25 | - |
Fixed versions
| 0.0.25 |
Sources
- osv: GHSA-8mrf-64fw-2x75
- https://nvd.nist.gov/vuln/detail/CVE-2020-8298
- https://github.com/pillys/fs-path/pull/6
- https://github.com/pillys/fs-path/commit/88ff5ee51046bb2c5d5e9c5afe6819b032092ce7
- https://hackerone.com/reports/324491
CVE-2020-8298 · published · modified · JSON