2 matches found
CVE-2022-25962
All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization...
Command injection
All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization...