Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-7673

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cg42-4wrc-gp47

Code Injection in node-extend node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument `A` of `extend` function`(A,B,as,isAargs)` located within `lib/extend.js` is executed by the `eval` function, resulting in code execution.

gitlab/npm/node-extend/CVE-2020-7673

Improper Input Validation node-extend is vulnerable to Arbitrary Code Execution. User input provided to the argument `A` of `extend` `function(A, B, as, isAargs)` located within `lib/extend.js` is executed by the `eval` function, resulting in code execution.