9.7 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.2%
dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.
github.com/skoranga/node-dns-sync/issues/5
nodesecurity.io/advisories/523