4 matches found
CVE-2021-23330
All versions of package launchpad are vulnerable to Command Injection via stop...
9.8CVSS7.2AI score
SaveExploits0References3
CVE-2021-23330
All versions of package launchpad are vulnerable to Command Injection via stop...
9.8CVSS9.8AI score0.05247EPSS
SaveExploits1References3
Command injection
All versions of package launchpad are vulnerable to Command Injection via stop...
7.5CVSS9.7AI score0.05247EPSS
SaveExploits1References3Affected Software1
CVE-2021-23330
CVE-2021-23330 affects the npm package launchpad . All versions are vulnerable to a Command Injection via the stop function, caused by an insecure use of exec(command) in stop. Documented evidence from multiple sources confirms this vulnerability and its impact. The SNYK entry explicitly states t...
9.8CVSS9.8AI score0.05247EPSS
SaveExploits1References3Affected Software1
20