8.3
High
CVE-2020-7738 All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load()…
Description
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| shiba | Versions not published |