CVE-2021-29300

Affected component: @ronomon/opened (Node.js library) prior to version 1.5.2. Root cause: The module is vulnerable to command injection when untrusted input is used to form commands that are executed, enabling an attacker to run arbitrary commands on the host. Impact: Remote code execution risk o...

CVE-2021-29300

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input...