Code injection

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28434

This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js...

CVE-2020-28434 Command Injection

This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js...

CVE-2020-28434

CVE-2020-28434 affects all versions of the gitblame package. The root cause is a command injection in gitblame.js where the file parameter is not properly sanitized before using exec, enabling arbitrary code execution. Public documents corroborate that the vulnerability exists across all versions...

CVE-2020-28437

This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js...

CVE-2020-28437

CVE-2020-28437 affects all versions of the npm package heroku-env. The vulnerability is a command-injection flaw in the get() function, with the injection point in lib/get.js which is required by index.js. This allows unsanitized user input to lead to shell execution. Public sources (Veracode, GH...

CVE-2020-28453

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28453

CVE-2020-28453 affects all versions of the npm package npos-tesseract. The vulnerability is a command injection flaw caused by improper sanitization at line 55 in lib/ocr.js, enabling injection via options/image parameters. Public sources describe the issue as critical (CVSS up to 9.8 from NVD) w...

CVE-2020-28434: Improper Neutralization of Special Elements used in a Command

This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js...

PT-2022-8890 · Gitblame · Gitblame

Name of the Vulnerable Software and Affected Versions: gitblame affected versions not specified Description: A command injection issue affects the package. The injection point is located in line 15 in lib/gitblame.js. Recommendations: At the moment, there is no information about a newer version...

CVE-2020-28453: Improper Neutralization of Special Elements used in a Command

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

PT-2022-8893

Name of the Vulnerable Software and Affected Versions heroku-env affected versions not specified Description A command injection issue affects the package. The injection point is located in lib/get.js, which is required by index.js. Recommendations At the moment, there is no information about a...

PT-2022-8900 · Unknown · Npos-Tesseract

Name of the Vulnerable Software and Affected Versions: npos-tesseract affected versions not specified Description: The issue affects all versions of the package npos-tesseract. It is a command injection vulnerability with the injection point located in line 55 of the lib/ocr.js file...

CVE-2020-28437: Improper Neutralization of Special Elements used in a Command

This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js...

Malicious code in lib-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459880c4c4101dee13b2b38e89cc6c814a4bfd2a354774da5082b185b3478e08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4298 Malicious code in lib-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459880c4c4101dee13b2b38e89cc6c814a4bfd2a354774da5082b185b3478e08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ntesseract vulnerable to Command Injection

The package ntesseract before 0.2.9 is vulnerable to Command Injection via lib/tesseract.js...

GHSA-W868-4576-RV24 ntesseract vulnerable to Command Injection

The package ntesseract before 0.2.9 is vulnerable to Command Injection via lib/tesseract.js...

sonar-wrapper Command Injection vulnerability

A command injection vulnerability affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js...

CVE-2020-28438

This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js...