monitoros (>=0.0.1 <=0.0.3), pk-app-pkgmgt (>=0.0.1 <=0.0.2) potentially affected by CVE-2020-7775 via freediskspace (=0.1.2)

freediskspace NPM version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on freediskspace and may be impacted: - monitoros =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-7775 Source advisory: OSV:GHSA-4GFQ-6M28-M5MG...

CVE-2020-7775 Command Injection

This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments in line 71 of freediskspace.js...

monitoros (>=0.0.1 <=0.0.3), pk-app-pkgmgt (>=0.0.1 <=0.0.2) potentially affected by CVE-2020-7775 via freediskspace (=0.1.2)

freediskspace NPM version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on freediskspace and may be impacted: - monitoros =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-7775 Source advisory: SNYK:JS-FREEDISKSPACE-1040716...