~ / search / GHSA-3hq6-rmv7-39vh

GHSA-3hq6-rmv7-39vh

Injection in op-browser

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-7625

Packages

EcosystemPackageAffectedFixed in
npm op-browser <= 1.0.9 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

op-browser through 1.0.9 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.

References

External links from the advisory. They lead to third-party sites.