Command Injection

2022-07-2605:54:04

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

61.8%

JSON

npm-help is vulnerable to command injection. The vulnerability exists in the export.latestVersion function in index.js which allows an attacker to inject and execute malicious commands.

CPENameOperatorVersion
npm-helpeq1.0.0
npm-helpeq1.0.0

CPE	Name	Operator	Version
	npm-help	eq	1.0.0
	npm-help	eq	1.0.0

References

github.com/advisories/GHSA-cffc-m953-rpr2

security.netapp.com/advisory/ntap-20220901-0012/

0.002 Low

EPSS

Percentile

61.8%

JSON

Related for VERACODE:36501