CVE-2020-7738: Shiba Project Shiba

High severity, CVSS 8.3. EPSS: 1.6% chance of exploitation in the next 30 days.

All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().

Affected products

• Shiba Project Shiba: any version

Published 2020-10-02. Last modified 2026-06-17.