Approved changes feed: RSS · Atom

cpe:2.3:a:skoranga:node-dns-sync:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSkoranga (30b0b655-5946-5364-9fa5-dbadc4243d3c)
ProductNode Dns Sync (e5e8ebc7-1657-5752-a7c1-8b9dc62b1e40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11079 vulnerable 2026-06-08 05:16:36.415143 command injection fix in node-dns-sync
HIGH (8.6)
node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1.
Published: 2020-05-28T18:40:12.000Z
Updated: 2024-08-04T11:21:14.625Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.