CVE-2020-7795: Get-Npm-Package-Version Project Get-Npm-Package-Version

Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days.

The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js.

Affected products

• Get-Npm-Package-Version Project Get-Npm-Package-Version: before 1.0.7 (fixed in 1.0.7)

Published 2022-08-02. Last modified 2026-06-17.