What’s Vulnerable › Vulnerabilities
CVE-2020-7738: Arbitrary Code Execution
- Severity: medium (CVSS 6.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-10-02 · updated 2026-06-17
Description
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
Affected products
- shiba: all versions
References
Get alerted when CVE-2020-7738 or the next vulnerability affects your stack