Install-Package Project Install-Package
2 CVEs affecting Install-Package Project Install-Package. Latest disclosed: 2020-04-02. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7629 | Critical | 9.8 | 2020-04-02 | install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument. |
CVE-2020-7628 | Critical | 9.8 | 2020-04-02 | umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization. |