CVE-2019-10783

The CVE-2019-10783 entry concerns the npm package lsof. Affected versions include 0.0.4 and all later releases, with vulnerability arising from every exported method invoking exec to parse user input, enabling Command Injection. An in-depth Snyk advisory provides a PoC demonstrating exploitation ...