Lucene search

K
osvGoogleOSV:GHSA-CQR2-XHG6-P268
HistoryJan 07, 2022 - 12:20 a.m.

OS Command Injection in node-mpv

2022-01-0700:20:27
Google
osv.dev
7
node-mpv
command injection
arbitrary commands
options argument
software

EPSS

0.063

Percentile

93.7%

node-mpv through 1.4.3 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.

EPSS

0.063

Percentile

93.7%

Related for OSV:GHSA-CQR2-XHG6-P268