CVE-2022-25962
All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.
9.8CVSS
9.6AI Score
0.001EPSS