CVE-2020-7629: Install-Package Project Install-Package

Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days.

install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.

Affected products

• Install-Package Project Install-Package: up to and including 0.4.0

Published 2020-04-02. Last modified 2026-06-17.