WS-2021-0630

There is "OS Command Injection" vulnerability on "is-program-installed" npm package before 2.3.4. This package tries to understand the given parameter name program or binary name is installed in the computer or not. However, since this package does not properly control the characters in the progr...

alert (>=4.0.0, <=5.1.0), alert-node (>=2.1.4, <=5.0.3) +5 more potentially affected by unknown CVE via is-program-installed (>=1.1.0, <=2.3.1)

is-program-installed NPM version =1.1.0, =4.0.0, =2.1.4, =0.0.3, =0.6.4, =0.4.0, =0.0.18, =0.4.6, =0.8.1 Source cves: unknown CVE Source advisory: MEND:WS-2021-0630...

OS Command Injection in zacanger/is-program-installed

✍️ Description There is "OS Command Injection" vulnerability on "is-program-installed" npm package. This package tries to understand the given parameter name program or binary name is installed in the computer or not. However, since this package does not properly control the characters in the...