R-Project Cran vulnerabilities

1 known vulnerability affecting r-project/cran.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2020-27637CRITICALCVSS 9.8fixed in 4.0.32021-01-12

CVE-2020-27637 [CRITICAL] CWE-22 CVE-2020-27637: The R programming language’s default package manager CRAN is affected by a path traversal vulnerabil The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages() function from the interpreter. Update to version 4.0.3