critical9.8
CVE-2020-8149
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
Impact
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Logkitty Project | Logkitty | before 0.7.1 |