Lucene search

K
osvGoogleOSV:GHSA-487W-PQCM-63HQ
HistoryJan 13, 2021 - 6:22 p.m.

Command injection in buns

2021-01-1318:22:13
Google
osv.dev
25

0.002 Low

EPSS

Percentile

64.9%

There is a command injection vulnerability in all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule).

CPENameOperatorVersion
bunsle1.1.6

0.002 Low

EPSS

Percentile

64.9%

Related for OSV:GHSA-487W-PQCM-63HQ