CVE-2020-14000
1 advisory.
npm/scratch-vm CVE-2020-14000: critical 9.8
Remote Code Execution in scratch-vm
Action: Upgrade scratch-vm to 0.2.0-prerelease.20200714185213 or later.
npm i scratch-vm@0.2.0-prerelease.20200714185213Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.0-prerelease.20200714185213 | - |
Fixed versions
| 0.2.0-prerelease.20200714185213 |
Sources
- osv: GHSA-vc9j-fhvv-8vrf
- https://nvd.nist.gov/vuln/detail/CVE-2020-14000
- https://github.com/LLK/scratch-vm/pull/2476
- https://github.com/LLK/scratch-vm/pull/2476/commits/90b9da45f4084958535338d1c4d71a22d6136aab
- https://github.com/LLK/scratch-vm
- https://scratch.mit.edu/discuss/topic/422904/?page=1#post-4223443
CVE-2020-14000 · published · modified · JSON