CVE-2020-7712
Fixed in a distro release EPSS 3%CVSS 7.2
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
Products: joyent json, oracle commerce_guided_search, oracle financial_services_crime_and_compliance_management_studio, oracle financial_services_regulatory_reporting_with_agilereporter, oracle timesten_in-memory_database
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | json | 10.0.0 |
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| Maven | org.webjars.npm:json |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | code-server | 0 |
| Chainguard | code-server-compat | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-19.2 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.4 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-19.5 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.2 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.4 | 0 |
| Chainguard | commercial-gitlab-rails-ee-assets-fips-19.5 | no fix |
| Chainguard | gitlab-rails-ce-18.1 | 0 |
| Chainguard | gitlab-rails-ce-18.2 | 0 |
| Chainguard | gitlab-rails-ce-18.3 | 0 |
| Chainguard | gitlab-rails-ce-18.4 | 0 |
| Chainguard | gitlab-rails-ce-18.5 | 0 |
| Chainguard | gitlab-rails-ce-18.6 | 0 |
| Chainguard | gitlab-rails-ce-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.10 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.11 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.6 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.8 | 0 |
| Chainguard | gitlab-rails-ce-assets-18.9 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.0 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-19.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.10 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.11 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.7 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.8 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-18.9 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.0 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.1 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.2 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.3 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.4 | 0 |
| Chainguard | gitlab-rails-ce-assets-fips-19.5 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.1 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.2 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.3 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.4 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.5 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.6 | 0 |
| Chainguard | gitlab-rails-ce-doc-18.7 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.2 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-doc-fips-18.7 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.1 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.2 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.3 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.4 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.5 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.6 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.7 | 0 |
| Wolfi | code-server | 0 |
| Wolfi | code-server-compat | 0 |