CVE-2022-21191

creationtimestamp| type| source ---|---|--- 2023-01-13 07:31:08+00:00| seen| https://t.me/cibsecurity/56479 2025-04-04 15:36:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10473...

CVE-2022-21191

CVE-2022-21191 concerns the npm package global-modules-path . Versions prior to 3.0.0 are vulnerable to a Command Injection via the internal getPath function caused by missing input sanitization and sandboxing. The result is a high-risk condition, with confirmed references across multiple sources...