This page aggregates publicly disclosed CVE and security risk information related to dnt, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2019-10788 | im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function. | [email protected] | 9.8 | 2.42% | 2020-02-04 | 2026-06-16 |
| CVE-2019-10787 | im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization. | [email protected] | 9.8 | 3.80% | 2020-02-04 | 2026-06-16 |