Skip to content
Not rated

CVE-2020-7632 node-mpv through 1.4.3 is vulnerable to Command Injection

Description

node-mpv through 1.4.3 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.

Affected products and versions

Product Affected versions Fixed in
node-mpv Versions not published
Track this CVE