CVE-2022-29080

creationtimestamp| type| source ---|---|--- 2022-04-12 12:23:13+00:00| seen| https://t.me/cibsecurity/40594...

CVE-2022-29080

The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions with a JSON object in which pkgs is a key, and there are shell metacharacters in a value...