CVE-2020-7628: Install-Package Project Install-Package

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.

Affected products

• Install-Package Project Install-Package: affected versions not specified
• Umount Project Umount: up to and including 1.1.6

Published 2020-04-02. Last modified 2026-06-17.