CVE-2020-7677

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

2%p79

Published

Jul 25, 2022 (Jul 25, 2022)

Modified

Jun 17, 2026

Description

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization.

Vendors: thenify project debian fedoraproject
Products: thenify, debian linux, fedora
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.