Lucene search

K
osvGoogleOSV:GHSA-6XV6-JPVW-CX6Q
HistoryMay 06, 2021 - 6:27 p.m.

Command injection in bestzip

2021-05-0618:27:36
Google
osv.dev
9

0.001 Low

EPSS

Percentile

48.0%

The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.

CPENameOperatorVersion
bestziplt2.1.7

0.001 Low

EPSS

Percentile

48.0%

Related for OSV:GHSA-6XV6-JPVW-CX6Q