Lucene search

K
nodejsAnonymousNODEJS:1685
HistoryMay 06, 2021 - 6:30 p.m.

Command injection in bestzip

2021-05-0618:30:10
Anonymous
www.npmjs.com
45

0.001 Low

EPSS

Percentile

48.0%

Overview

Affected versions of the package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.

Recommendation

Upgrade to version 2.1.7 or later

References

CPENameOperatorVersion
bestziplt2.1.7

0.001 Low

EPSS

Percentile

48.0%