Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

TI-2020-06208 CVE-2020-7688 · GHSA-6m8p-4fxj-pgc2

Command injection in mversion

Priority LOW 37

The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0055 Published 2020-07-01 Fixed in 2.0.1 CWE-78
TI-2020-03544 CVE-2020-4059 · GHSA-qjg4-w4c6-f6c6

Command Injection in mversion

Priority LOW 37

In mversion before 2.0.0, there is a command injection vulnerability.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.02596 Published 2020-06-18 Fixed in 2.0.0 CWE-77