8.3
Élevée
CVE-2020-7738 All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load()…
Description
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| shiba | Versions non publiées |