CVE-2020-11079

Published May 28th, 2020

View on NVD ↗

CVSS v3

8.6

HIGH

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1.

skoranga/node-dns-sync

Sync version of DNS lookup. Useful for server startup activities.

GitHub