npm/genieacs CVE-2021-46704: critical 9.8, EPSS 21.90%
OS Command Injection in GenieACS
Action: Upgrade genieacs to 1.2.8 or later.
npm i genieacs@1.2.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.8 | - |
Fixed versions
| 1.2.8 |
Sources
- osv: GHSA-2877-693q-pj33
- https://nvd.nist.gov/vuln/detail/CVE-2021-46704
- https://github.com/genieacs/genieacs/commit/7f295beeecc1c1f14308a93c82413bb334045af6
- https://github.com/genieacs/genieacs
- https://github.com/genieacs/genieacs/releases/tag/v1.2.8
CVE-2021-46704 · published · modified · JSON