CVE-2020-7794: Buns Project Buns

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule).

Affected products

• Buns Project Buns: any version

Published 2021-01-08. Last modified 2026-06-17.