Install-package Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Install-package Project records in CISA KEV

No Install-package Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Install-package · all components

TI-2020-06150 CVE-2020-7629 · GHSA-6m4r-m3gc-h4r5

MEDIUM 49

install-package through 0.4.0 is vulnerable to Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04221 Published 2020-04-02 No fix listed CWE-78

TI-2020-06149 CVE-2020-7628 · GHSA-6q48-vjq2-mwcj

MEDIUM 46

umount through 1.1.6 is vulnerable to Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01788 Published 2020-04-02 No fix listed CWE-78