Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/summit@0.1.19
purl pkg:npm/summit@0.1.19
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GMS-2016-21

Unsafe eval() When using the PouchDB driver in the module, an attacker can execute arbitrary commands via the collection name. There are no reported fixed by versions.
npm-315

Unsafe eval() Summit is a node web framework. When using the PouchDB driver in the module, an attacker can execute … There are no reported fixed by versions.
GHSA-cwcp-6c48-fm7m
Aliases:
CVE-2017-16020
Unsafe eval() in summit allows arbitrary code execution Affected versions of `summit` allow attackers to execute arbitrary commands via collection … There are no reported fixed by versions.
This package is not known to fix any advisories.