VULNERABILITY INTELLIGENCE

CVE-2020-7686

CVSS score7.5 HIGH

EPSS probability1.77%

CISA KEVNot currently listed

Published2020-07-25

Last modified2026-06-17

Description

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function.