CVE-2020-13110: Kerberos Project Kerberos

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.

Affected products

• Kerberos Project Kerberos: before 1.0.0 (fixed in 1.0.0)

Published 2020-05-16. Last modified 2026-06-17.