CVE-2020-7686

PoC —

CVSS 3.1

7.5 high

EPSS

2%p77

Published

Jul 25, 2020 (Jul 25, 2020)

Modified

Jun 17, 2026

Description

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function.

Vendors: rollup-plugin-dev-server project
Products: rollup-plugin-dev-server
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.