npm logkitty vulnerabilities

Latest npm logkitty CVEs

Newest publication first

1. CVE-2020-8149 Arbitrary shell command execution in logkitty

   Published 2020-05-15

   Critical·CVSS 9.8 EPSS 2.0%

   Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.