Lucene search

K
osvGoogleOSV:GHSA-PF8J-VHG8-XMC3
HistoryFeb 10, 2022 - 11:42 p.m.

karma-mojo enables OS Command Injection

2022-02-1023:42:58
Google
osv.dev
10

0.012 Low

EPSS

Percentile

85.4%

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.

CPENameOperatorVersion
karma-mojole1.0.1

0.012 Low

EPSS

Percentile

85.4%

Related for OSV:GHSA-PF8J-VHG8-XMC3