~ / search / GHSA-7vm7-j8p7-h346

GHSA-7vm7-j8p7-h346

Code injection in blamer

Source: GitHub Advisory Database (reviewed) High CVE-2020-8137

Packages

EcosystemPackageAffectedFixed in
npm blamer < 1.0.1 1.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.

References

External links from the advisory. They lead to third-party sites.