Security Advisory

CVE-2020-7632

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-06 12:21:43

Last updated 2024-08-04 09:33:19

Assigner snyk

State PUBLISHED

node-mpv through 1.4.3 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.