CVE-2020-7627

Name of the Vulnerable Software and Affected Versions node-key-sender versions 1.0.11 and earlier

Description The issue allows execution of arbitrary commands via the arrParams argument in the execute() function. This enables command injection attacks.

Recommendations For node-key-sender versions 1.0.11 and earlier, as a temporary workaround, consider disabling the execute() function until a patch is available. Restrict access to the arrParams argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.