Vulnerabilities (CVE)

Filtered by vendor Node-extend Project Subscribe
Filtered by product Node-extend
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7673 1 Node-extend Project 1 Node-extend 2023-12-10 7.5 HIGH 9.8 CRITICAL
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument `A` of `extend` function`(A,B,as,isAargs)` located within `lib/extend.js` is executed by the `eval` function, resulting in code execution.