WS-2020-0436

In commit-msg in versions 0.1.0 to 0.2.3 is vulnerable to RCE, via insecure command formatting...

WS-2020-0431

In extra-asciinema in versions 0.0.1 to 1.0.22 is vulnerable to Command Injection via insecure command formatting...

WS-2020-0430

In extra-ffmpeg in versions 0.0.1 to 4.0.3 is vulnerable to cCommand Injection via insecure command formatting...

Node.js third-party modules: [devcert] Command Injection via insecure command formatting

I would like to report a Command Injection issue in the devcert module. It allows to execute arbitrary commands on the victim's PC. Module module name: devcert version: 1.1.0 npm page: https://www.npmjs.com/package/devcert Module Description devcert - Development SSL made easy Module Stats 276,46...

Node.js third-party modules: [blamer] RCE via insecure command formatting

I would like to report a RCE issue in the blamer module. It allows to execute arbitrary commands remotely inside the victim's PC Module module name: blamer version: 0.1.13 npm page: https://www.npmjs.com/package/blamer Module Description Blamer is a tool for get information about author of code...

Node.js third-party modules: [meta-git] RCE via insecure command formatting

I would like to report a RCE issue in the meta-git module. It allows to execute arbitrary commands remotely inside the victim's PC Module module name: meta-git version: 1.1.2 npm page: https://www.npmjs.com/package/meta-git Module Description git plugin for meta Module Stats 60 downloads in the...