WS-2020-0439

In arpping in versions 1.0.0 to 2.0.0 is vulnerable to RCE, it allows to execute arbitrary commands on the victim's PC...

homebridge-modern-forms (0.0.2), node-red-contrib-self-healing (>=0.9.1, <=0.9.3) potentially affected by unknown CVE via arpping (2.0.0)

arpping NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on arpping and may be impacted: - homebridge-modern-forms 0.0.2 - node-red-contrib-self-healing =0.9.1, =0.9.3 Source cves: unknown CVE Source advisory: MEND:WS-2020-0439...

Node.js third-party modules: [arpping] Remote Code Execution

I would like to report RCE in arpping It allows to execute arbitrary commands on the victim's PC Module module name: arpping version: 2.0.0 npm page: https://www.npmjs.com/package/arpping Module Description Discover and search for internet-connected devices locally using ping and arp Module Stats...