VDB
DEBIAN-CVE-2020-7677
DEBIAN-CVE-2020-7677
PUBLISHED
CVSS 9.800000190734863 CRITICAL
This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | node-thenify | 0, 0, 0 |
| Debian:14 | node-thenify | 0, 0, 0 |
| Debian:13 | node-thenify | 0, 0, 0 |
| Debian:12 | node-thenify | 0, 0, 0 |
Timeline
- Jul 25, 2022 CVE Published
- Apr 28, 2026 CVE Updated