CVE-2018-3786
1 advisory.
npm/egg-scripts CVE-2018-3786: critical 9.8, EPSS 12.28%
Command Injection in egg-scripts
Action: Upgrade egg-scripts to 2.8.1 or later.
npm i egg-scripts@2.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.1 | - |
Fixed versions
| 2.8.1 |
Sources
- osv: GHSA-c9j3-wqph-5xx9
- https://nvd.nist.gov/vuln/detail/CVE-2018-3786
- https://github.com/eggjs/egg-scripts/pull/26
- https://github.com/eggjs/egg-scripts/commit/b98fd03d1e3aaed68004b881f0b3d42fe47341dd
- https://hackerone.com/reports/388936
- https://github.com/advisories/GHSA-c9j3-wqph-5xx9
- https://github.com/eggjs/egg-scripts/blob/2.8.1/History.md
- https://www.npmjs.com/advisories/694
CVE-2018-3786 · published · modified · JSON