4 matches found
CVE-2021-23330
All versions of package launchpad are vulnerable to Command Injection via stop...
CVE-2021-23330
All versions of package launchpad are vulnerable to Command Injection via stop...
Command injection
All versions of package launchpad are vulnerable to Command Injection via stop...
CVE-2021-23330
CVE-2021-23330 affects the npm package launchpad . All versions are vulnerable to a Command Injection via the stop function, caused by an insecure use of exec(command) in stop. Documented evidence from multiple sources confirms this vulnerability and its impact. The SNYK entry explicitly states t...