GHSA-v756-4whv-48vcCriticalCVSS 9.8

Code Injection in cd-messenger

Published
May 17, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-7675 →

📋 Description

cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the color argument executed by the eval function resulting in code execution.

🎯 Affected products1

  • npm/cd-messenger:<= 2.7.26

🔗 References (3)