← CVE Intelligence

CVE-2020-7738

Arbitrary Code Execution PUBLISHED

Description (CNA)

All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().

Affected (CNA)

Vendor / productVersions
n/a / shibaaffected 0 before unspecified

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.