3 matches found
CVE-2022-25890
All versions of the package wifey are vulnerable to Command Injection via the connect function due to improper input sanitization...
9.8CVSS8.3AI score0.01329EPSS
SaveExploits1References1
CVE-2022-25890
The CVE-2022-25890 entry affects the Node.js package wifey , with a vulnerability in the connect() function that allows Command Injection due to improper input sanitization. Public references (e.g., Snyk, GitHub advisory) show a PoC exploit and indicate a lack of a fixed version, underscoring rea...
9.8CVSS9.7AI score0.01329EPSS
SaveExploits1References1Affected Software1
20