7 matches found
CVE-2019-10804
serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation...
@concepto/eb (>=1.1.7, <=1.1.95), @concepto/nuxt (1.9.427) +6 more potentially affected by CVE-2019-10804 via serial-number (1.3.0)
serial-number NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on serial-number and may be impacted: - @concepto/eb =1.1.7, =0.0.1, =1.9.35, =1.1.0, =0.6.1, =2.5.0, =3.1.1 Source cves: CVE-2019-10804 Source advisory: GHSA-3FW4-4H3M-892H...
@concepto/eb (>=1.1.7, <=1.1.95), @concepto/nuxt (1.9.427) +6 more potentially affected by CVE-2019-10804 via serial-number (1.3.0)
serial-number NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on serial-number and may be impacted: - @concepto/eb =1.1.7, =0.0.1, =1.9.35, =1.1.0, =0.6.1, =2.5.0, =3.1.1 Source cves: CVE-2019-10804 Source advisory: OSV:GHSA-3FW4-4H3M-89...
CVE-2019-10804
serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation...
CVE-2019-10804
serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation...
CVE-2019-10804
serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation...
@concepto/eb (>=1.1.7, <=1.1.95), @concepto/nuxt (1.9.427) +11 more potentially affected by CVE-2019-10804 via serial-number (>=0.3.0, <=1.3.0)
serial-number NPM version =0.3.0, =1.1.7, =0.0.1, =1.9.35, =1.1.0, =1.1.1, =0.2.1, =0.1.4, =0.1.1, =0.1.24, =2.5.0, =3.1.1 Source cves: CVE-2019-10804 Source advisory: SNYK:JS-SERIALNUMBER-559010...