Lucene search

K
osvGoogleOSV:GHSA-RPHM-C8GW-3R38
HistoryJun 03, 2022 - 12:00 a.m.

OS Command Injection in lifion-verify-deps

2022-06-0300:00:58
Google
osv.dev
10
os command injection
lifion-verify-dependencies
package.json
vulnerability

EPSS

0.003

Percentile

68.2%

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project’s package.json file.

EPSS

0.003

Percentile

68.2%

Related for OSV:GHSA-RPHM-C8GW-3R38