CVE-2020-7688

7.8 highEPSS 0.5%

High (7.8) in mversion project mversion. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in mversion 2.0.1.

The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.

Severity

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-07-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-6m8p-4fxj-pgc2	npm	mversion	<2.0.1	2.0.1