npm/mock2easy CVE-2020-7697: critical 9.8, EPSS 2.04%
Code injection in mock2easy
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g4xj-wcq6-qwx5
- https://nvd.nist.gov/vuln/detail/CVE-2020-7697
- https://github.com/appLhui/mock2easy/blob/1da728fa0f61cc29fb415f0677e54ad4902261d3/routes/index.js#L132-L139
- https://snyk.io/vuln/SNYK-JS-MOCK2EASY-572312
- https://www.npmjs.com/package/mock2easy
CVE-2020-7697 · published · modified · JSON