VULNERABILITY INTELLIGENCE

CVE-2020-7687

CVSS score7.5 HIGH

EPSS probability1.76%

CISA KEVNot currently listed

Published2020-07-25

Last modified2026-06-17

Description

This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js.