CVE-2021-23377

This affects all versions of package onion-oled-js. If attacker-controlled user input is given to the scroll function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23377 Arbitrary Command Injection

This affects all versions of package onion-oled-js. If attacker-controlled user input is given to the scroll function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23377

CVE-2021-23377 affects the onion-oled-js library. The vulnerability is a command injection in the scroll function caused by unsanitized attacker-controlled input used with Node.js child_process.exec. Multiple sources (NVD entry, GHSA advisory, OSV, Veracode, CNVD, SNYK) confirm that all versions ...