CVE-2020-7677

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-7677
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7677.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-7677
Aliases
Downstream
Related
Published
2022-07-25T14:15:10.047Z
Modified
2026-03-15T22:38:27.349532Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization.

References

Affected packages

Git / github.com/thenables/thenify

Affected ranges

Type
GIT
Repo
https://github.com/thenables/thenify
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1d054b4d60e72087f4e804565e540258ecee7f0b
Fixed
0d94a24eb933bc835d568f3009f4d269c4c4c17a
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.3.1"
        }
    ]
}

Affected versions

2.*
2.0.0
3.*
3.0.0
3.1.0
3.1.1
3.2.0
3.2.1
3.3.0

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "36"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "37"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7677.json"