CVE-2020-7730

The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.

• CWE-78

• https://github.com/nfriedly/node-bestzip/commit/45d4a901478c6a8f396c8b959dd6cf8fd3f955b6Patch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-BESTZIP-609371Patch, Third Party Advisory
• https://github.com/nfriedly/node-bestzip/commit/45d4a901478c6a8f396c8b959dd6cf8fd3f955b6Patch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-BESTZIP-609371Patch, Third Party Advisory

Published

Sep 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7723All versions of package promisehelpers are vulnerable to Pro…9.8
• CVE-2020-7724All versions of package tiny-conf are vulnerable to Prototyp…9.8
• CVE-2020-7725All versions of package worksmith are vulnerable to Prototyp…9.8
• CVE-2020-7726All versions of package safe-object2 are vulnerable to Proto…9.8
• CVE-2020-7727All versions of package gedi are vulnerable to Prototype Pol…9.8
• CVE-2020-7729The package grunt before 1.3.0 are vulnerable to Arbitrary C…7.1
• CVE-2020-7731This affects all versions <0.7.0 of package github.com/russe…7.5
• CVE-2020-7733The package ua-parser-js before 0.7.22 are vulnerable to Reg…7.5
• CVE-2020-7734All versions of package cabot are vulnerable to Cross-site S…8.2
• CVE-2020-7735The package ng-packagr before 10.1.1 are vulnerable to Comma…6.6
• CVE-2020-7736The package bmoor before 0.8.12 are vulnerable to Prototype …9.8
• CVE-2020-7737All versions of package safetydance are vulnerable to Protot…9.8