3 matches found
CVE-2025-59831
CVE-2025-59831 affects the Node.js package git-commiters. The vulnerability stems from the gitCommiters(options, callback) API path where user-controlled options (e.g., cwd and revisionRange) were not properly sanitized and were concatenated into command execution, enabling potential command inje...
SUSE CVE-2011-3632
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks...
Anton Myshenin aws-lambda-multipart-parser NPM Packet Denial of Service Vulnerability
Anton Myshenin aws-lambda-multipart-parser NPM is a parser for handling multiple form data requests. A security vulnerability exists in the index.js file in the Anton Myshenin aws-lambda-multipart-parser NPM package prior to version 0.1.2. An attacker can exploit the vulnerability to cause a deni...