Lucene search
GoogleOSV:GHSA-M7XQ-8JP8-RJ2CHistoryApr 13, 2022 - 12:00 a.m.
Command injection in npm-dependency-versions
2022-04-1300:00:33
Google
osv.dev
17
0.002 Low
EPSS
Percentile
58.5%
The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions with a JSON object in which pkgs is a key, and there are shell metacharacters in a value.
| CPE | Name | Operator | Version |
|---|---|---|---|
| npm-dependency-versions | le | 0.3.0 |
Related
nvd
nvd
CVE-2022-29080
2022-04-12 05:15:07
github
github
Command injection in npm-dependency-versions
2022-04-13 00:00:33
veracode
veracode
Command Injection
2022-04-13 08:00:06
cve
cve
CVE-2022-29080
2022-04-12 05:15:07
cnvd
cnvd
npm-dependency-versions command injection vulnerability
2022-04-15 00:00:00
prion
prion
Command injection
2022-04-12 05:15:00
cvelist
cvelist
CVE-2022-29080
2022-04-12 04:45:34