CVE-2020-11079 — command injection fix in node-dns-sync
node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vuln…
Published: 2020-05-28 · CVSS: 8.6 · CVSS 3.1
node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7