CVE-2020-11079

node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1.

• CWE-94
• CWE-77

• https://github.com/skoranga/node-dns-sync/commit/cb10a5ac7913eacc031ade7d91596277f31645dcPatch, Third Party Advisory
• https://github.com/skoranga/node-dns-sync/security/advisories/GHSA-wh69-wc6q-7888Third Party Advisory
• https://github.com/skoranga/node-dns-sync/commit/cb10a5ac7913eacc031ade7d91596277f31645dcPatch, Third Party Advisory
• https://github.com/skoranga/node-dns-sync/security/advisories/GHSA-wh69-wc6q-7888Third Party Advisory

Published

May 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11073In Autoswitch Python Virtualenv before version 0.16.0, a use…7.8
• CVE-2020-11074In PrestaShop from version 1.5.3.0 and before version 1.7.6.…5.4
• CVE-2020-11075In Anchore Engine version 0.7.0, a specially crafted contain…9.9
• CVE-2020-11076In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could…7.5
• CVE-2020-11077In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could sm…7.5
• CVE-2020-11078In httplib2 before version 0.18.0, an attacker controlling u…6.8
• CVE-2020-1108A denial of service vulnerability exists when .NET Core or .…7.5
• CVE-2020-11080In nghttp2 before version 1.41.0, the overly large HTTP/2 SE…7.5
• CVE-2020-11081osquery before version 4.4.0 enables a privilege escalation …8.2
• CVE-2020-11082In Kaminari before 1.2.1, there is a vulnerability that woul…6.1
• CVE-2020-11083In October from version 1.0.319 and before version 1.0.466, …4.8
• CVE-2020-11084In iPear, the manual execution of the eval() function can le…5.4