GHSA-2275-RPF5-XV8H is-http2 vulnerable to Improper Input Validation

All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function...

CVE-2022-25906

All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function...

is-http2 操作系统命令注入漏洞

is-http2 is an application by Stefan Judis personal developer. A simple module for checking whether certain servers support HTTP/2. An operating system command injection vulnerability exists in is-http2, which stems from a lack of input cleanup or other checks and the use of sandboxing by the isH...