https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 00:08:28 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-25054 cnvd-2018-25054 https://cve.radiocsirt.org/vuln/cnvd-2018-25054 https://cve.radiocsirt.org/vuln/euvd-2026-171097 EUVD-2026-171097 https://cve.radiocsirt.org/vuln/euvd-2026-171097 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16020 <p>Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.</p> <p>Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16020 https://cve.radiocsirt.org/vuln/ghsa-cwcp-6c48-fm7m <p><strong>Affected:</strong> npm: summit</p> <p>Affected versions of `summit` allow attackers to execute arbitrary commands via collection names when using the `PouchDB` driver.</p> <p>## Recommendation</p> <p>No direct patch is available at this time.</p> <p>Currently, the best option to mitigate the issue is to avoid using the `PouchDB` driver, as the package author has abandoned this feature entirely.</p> <p><strong>Affected:</strong> npm: summit</p> <p>Affected versions of `summit` allow attackers to execute arbitrary commands via collection names when using the `PouchDB` driver.</p> <p>## Recommendation</p> <p>No direct patch is available at this time.</p> <p>Currently, the best option to mitigate the issue is to avoid using the `PouchDB` driver, as the package author has abandoned this feature entirely.</p> https://cve.radiocsirt.org/vuln/ghsa-cwcp-6c48-fm7m https://cve.radiocsirt.org/vuln/gsd-2017-16020 gsd-2017-16020 https://cve.radiocsirt.org/vuln/gsd-2017-16020