Command Injection

bwm-ng is vulnerable to Command Injection. The vulnerability exists due to the lack of input sanitization in the check function of the bwm-ng.js file, which allows an attacker to inject and execute malicious code. Note: To execute the code snippet and potentially exploit the vulnerability, the...

CVE-2023-26129

All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within t...