EUVD-2023-0792

Malicious code in bioql PyPI...

CVE-2022-25855

All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization...

CVE-2022-25855

All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization...

npm create-choo-app3 安全漏洞

npm create-choo-app3 is a library from npm USA. It is used to create a new choo application. A security vulnerability exists in create-choo-app3, which stems from improper cleanup of user input. An attacker exploits the vulnerability to perform command injection via the devInstall function...