CVE-2020-11079: Node-DNS-Sync Project Node-DNS-Sync

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1.

Affected products

• Node-DNS-Sync Project Node-DNS-Sync: before 0.2.1 (fixed in 0.2.1)

Published 2020-05-28. Last modified 2026-06-17.