CVE-2020-11079
1 advisory.
npm/dns-sync CVE-2020-11079: high 8.6
Command injection in node-dns-sync
Action: Upgrade dns-sync to 0.2.1 or later.
npm i dns-sync@0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.3 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: GHSA-wh69-wc6q-7888
- https://github.com/skoranga/node-dns-sync/security/advisories/GHSA-wh69-wc6q-7888
- https://nvd.nist.gov/vuln/detail/CVE-2020-11079
- https://github.com/skoranga/node-dns-sync/commit/cb10a5ac7913eacc031ade7d91596277f31645dc
- https://github.com/skoranga/node-dns-sync
CVE-2020-11079 · published · modified · JSON