npm/summit CVE-2017-16020: critical 9.8, EPSS 2.46%
Unsafe eval() in summit allows arbitrary code execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.0 | - | 0.1.22 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-cwcp-6c48-fm7m
- https://nvd.nist.gov/vuln/detail/CVE-2017-16020
- https://github.com/notduncansmith/summit/issues/23
- https://github.com/fredhohman/summit
CVE-2017-16020 · published · modified · JSON