7.2
High
CVE-2020-7712 This affects the package json before 10.0.0
Description
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| json 10.0 | earliest → < 10.0.0 | 10.0.0 |