{"id":"CVE-2020-8129","details":"An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.","aliases":["GHSA-rhwf-hqpr-q8g2"],"modified":"2026-07-09T00:37:28.270053Z","published":"2020-02-14T22:15:10.923Z","references":[{"type":"EVIDENCE","url":"https://hackerone.com/reports/660563"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pofider/node-script-manager","events":[{"introduced":"0"},{"last_affected":"2039876514e35c1fc2f0f53462a9006227dae1c8"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"0.8.6"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:script-manager_project:script-manager:*:*:*:*:*:node.js:*:*"}}],"versions":["0.8.6","0.8.5","0.8.4","0.8.3","0.8.2","0.8.1","0.8.0","0.7.1","0.7.0","0.6.0","0.5.11","0.5.10","0.5.9","0.5.8","0.5.7","0.5.6","0.5.5","0.5.4","0.5.3","0.5.1","0.5.0","0.4.5","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.3.1","0.3.0","0.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8129.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}