CVE-2020-16257

9.8

CRITICALCVSS v3

Published

October 28, 2020

CVSS v2

10 HIGH

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Winston 1.5.4 devices are vulnerable to command injection via the API.

NPMA logger for just about everything.

all versionsNVD

GitHubA logger for just about everything.

all versionsNVD

NPM

Stub TypeScript definitions entry for winston, which provides its own types definitions

all versionsNVD