reliable-macaca-slave (>=1.0.0 <=2.1.0), reliable-slave (>=1.0.0 <=1.0.3) potentially affected by CVE-2021-23381 via killing (=1.0.6)

killing NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on killing and may be impacted: - reliable-macaca-slave =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2021-23381 Source advisory: OSV:GHSA-CQ77-8JPX-892G...

CVE-2021-23381 Arbitrary Command Injection

This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23381

CVE-2021-23381 affects all versions of the npm package killing. The root cause is use of child_process.exec without input sanitization, enabling an attacker-controlled input to execute arbitrary commands. Public advisories (GHSA-CQ77-8JPX-892G, OSV entry) describe command injection impacting vers...

reliable-macaca-slave (>=1.0.0 <=2.1.0), reliable-slave (>=1.0.0 <=1.0.3) potentially affected by CVE-2021-23381 via killing (=1.0.6)

killing NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on killing and may be impacted: - reliable-macaca-slave =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2021-23381 Source advisory: SNYK:JS-KILLING-1078532...