CVE-2020-8186

9.8

CRITICALCVSS v3

Published

July 10, 2020

CVSS v2

7.5 HIGH

Affected

3 projects

Assigned by

[email protected]

Severity scale

010

Description

A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.

devcert

NPMGenerate trusted local SSL/TLS certificates for local SSL development

= 1.1.0, < 1.1.2NVD

davewasmer/devcert

GitHubLocal HTTPS development made easy

= 1.1.0, < 1.1.2NVD

expo/devcert

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Local HTTPS development made easy

= 1.1.0, < 1.1.2NVD

Security Advisories

CVE-2020-8186

Description

More on this CVE