CVE-2020-7634
1 advisory.
npm/heroku-addonpool CVE-2020-7634: critical 9.8
OS Command Injection in heroku-addonpool
Action: Upgrade heroku-addonpool to 0.1.16 or later.
npm i heroku-addonpool@0.1.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.16 | - |
Fixed versions
| 0.1.16 |
Sources
- osv: GHSA-3q9x-w53p-jg53
- https://nvd.nist.gov/vuln/detail/CVE-2020-7634
- https://github.com/nodef/heroku-addonpool/commit/b1a5b316473ac92d783f3d54ee048d54082da38d
- https://github.com/nodef/heroku-addonpool/blob/master/index.js
- https://snyk.io/vuln/SNYK-JS-HEROKUADDONPOOL-564428
CVE-2020-7634 · published · modified · JSON