{"action":"Upgrade dns-sync to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0.1.3"}],"component":"dns-sync","cve_ids":["CVE-2020-11079"],"ecosystem":"npm","epss":0.02685,"exploited":false,"fixed_versions":["0.2.1"],"ghsa_id":"GHSA-wh69-wc6q-7888","id":"tcs_01M5KGF3TFXEK4V1TSWCD62QCZ","modified_at":"2026-07-08T06:00:37.185301433Z","published_at":"2020-05-28T18:42:59Z","references":["https://osv.dev/vulnerability/GHSA-wh69-wc6q-7888","https://github.com/skoranga/node-dns-sync/security/advisories/GHSA-wh69-wc6q-7888","https://nvd.nist.gov/vuln/detail/CVE-2020-11079","https://github.com/skoranga/node-dns-sync/commit/cb10a5ac7913eacc031ade7d91596277f31645dc","https://github.com/skoranga/node-dns-sync"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-wh69-wc6q-7888","url":"https://osv.dev/vulnerability/GHSA-wh69-wc6q-7888"}],"summary":"Command injection in node-dns-sync"}