CVE-2020-5282: Nick Chan Bot Project Nick Chan Bot

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software package. This allows arbitrary shell execution,which can compromise the bot This is patched in version 1.0.0-beta

Affected products

• Nick Chan Bot Project Nick Chan Bot: version 1.0.0 only

Published 2020-03-25. Last modified 2026-06-17.