critical9.8
CVE-2020-8137
Code injection in blamer
Impact
Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | blamer | <= 1.0.0 | 1.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blamer Project | Blamer | before 1.0.1 |