CVE-2017-16020

Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.

Date published : 2018-06-04

https://github.com/notduncansmith/summit/issues/23

https://nodesecurity.io/advisories/315