EUVD-2022-6489

Malicious code in bioql PyPI...

Command Injection

monorepo-build is vulnerable to command injection. The vulnerability exists in the publish function in index.js which allows an attacker to inject and execute arbitrary commands...

monorepo-build Command Injection vulnerability

A command injection vulnerability affects all versions of package monorepo-build...

GHSA-5VRC-7JFR-4642 monorepo-build Command Injection vulnerability

A command injection vulnerability affects all versions of package monorepo-build...

monorepo-publish (>=0.1.0 <=0.1.9) potentially affected by CVE-2020-28423 via monorepo-build (>=0.1.0 <=0.1.9)

monorepo-build NPM version =0.1.0, =0.1.0, =0.1.9 Source cves: CVE-2020-28423 Source advisory: OSV:GHSA-5VRC-7JFR-4642...

CVE-2020-28423

This affects all versions of package monorepo-build...

Information disclosure

This affects all versions of package monorepo-build...

CVE-2020-28423

CVE-2020-28423 affects all versions of the npm package monorepo-build. The connected sources describe a command-injection vulnerability in the package (notably in the publish function) with PoC examples showing how arguments can inject and execute arbitrary commands. Exploitation details are prov...

CVE-2020-28423 Command Injection

This affects all versions of package monorepo-build...

monorepo 命令注入漏洞

monorepo is a movie homepage source repository from cinematic open source. A command injection vulnerability exists in all versions of monorepo-build, which stems from the presence of command injection...

PT-2022-8886 · Unknown · Monorepo-Build

Name of the Vulnerable Software and Affected Versions: monorepo-build affected versions not specified Description: A command injection issue affects the package. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents whe...

monorepo-publish (>=0.1.0 <=0.1.9) potentially affected by CVE-2020-28423 via monorepo-build (>=0.1.0 <=0.1.9)

monorepo-build NPM version =0.1.0, =0.1.0, =0.1.9 Source cves: CVE-2020-28423 Source advisory: SNYK:JS-MONOREPOBUILD-1050392...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection. PoC var a =require"monorepo-build"; a.build"./","& touch 1111"," & touch shaaaa" Remediation There is no fixed version for monorepo-build. Credit: JHU System Security Lab...