CVE-2020-8215CWE-120

CVE-2020-8215: vulnerability in node-canvas

Published · Updated

Follow this CVE+ Monitor node-canvas+ Monitor canvas

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.3%
A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.
Affected products
n/a · node-canvas