fw-host-discovery (>=1.0.0 <=1.0.5) potentially affected by CVE-2018-16461 via libnmap (=0.2.33)

libnmap NPM version =0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on libnmap and may be impacted: - fw-host-discovery =1.0.0, =1.0.5 Source cves: CVE-2018-16461 Source advisory: OSV:GHSA-7G2W-6R25-2J7P...

CVE-2018-16461

creationtimestamp| type| source ---|---|--- 2018-11-01 14:51:33+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7g2w-6r25-2j7p...

CVE-2018-16461

CVE-2018-16461 affects the libnmapp package (Node.js binding to Nmap). Concrete details from connected docs show a command injection vulnerability in versions prior to 0.4.16, exploitable via arguments to the range options, potentially allowing arbitrary commands execution. Impact is described as...