system
Describe <CVE-2020-8149>.
user
What is <CVE-2020-8149>?
assistant
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1..