npm/logkitty CVE-2020-8149: critical 9.8, EPSS 2.01%
Arbitrary shell command execution in logkitty
Action: Upgrade logkitty to 0.7.1 or later.
npm i logkitty@0.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.1 | - |
Fixed versions
| 0.7.1 |
Sources
- osv: GHSA-v8v8-6859-qxm4
- https://nvd.nist.gov/vuln/detail/CVE-2020-8149
- https://github.com/zamotany/logkitty/pull/18
- https://github.com/zamotany/logkitty/commit/ef2f673e25c629544dd3de6429999318447dd6bf
- https://hackerone.com/reports/825729
CVE-2020-8149 · published · modified · JSON