EUVD-2022-6274

Malicious code in bioql PyPI...

Command Injection

xopen is vulnerable to command injection. The vulnerability exists in xopenfilepath function in index.js because the command execution implementation is not properly handled which allows an attacker to inject and execute malicious commands...

xopen is vulnerable to OS Command Injection in Exported Function xopen(filepath)

A command injection vulnerability affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopenfilepath...

GHSA-74WF-CWJG-9CF2 xopen is vulnerable to OS Command Injection in Exported Function xopen(filepath)

A command injection vulnerability affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopenfilepath...

CVE-2020-28447

This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopenfilepath...

Design/Logic Flaw

This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopenfilepath...

CVE-2020-28447 Command Injection

This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopenfilepath...

CVE-2020-28447

The CVE-2020-28447 entry corresponds to a command-injection vulnerability in the xopen npm package. Affected software: all versions of xopen. Root cause: in xopen(filepath) located in index.js, the code executes OS commands without proper sanitization (injection point at line 14). Impact: enables...

xopen 命令注入漏洞

xopen is a package from Andrew Imm, a personal developer. It provides a very simple Promise API for opening files from Node on Windows, macOS and Linux. A security vulnerability exists in xopen that stems from a command injection attack injection point in the xopenfilepath function in the index.j...

PT-2021-2030 · Xopen · Xopen

Name of the Vulnerable Software and Affected Versions: xopen versions all Description: The issue is related to a command injection vulnerability in the xopenfilepath function. This vulnerability exists due to the lack of neutralization of special elements used in the operating system command...

Command Injection

Overview xopen is a package that provides a dead-simple Promise API for opening files from Node on Windows, macOS, and Linux. Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 14 in index.js in the exported function xopenfilepath PoC: va...