npm/open: critical
Command Injection in open
Action: Upgrade open to 6.0.0 or later.
npm i open@6.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.0 | - |
Fixed versions
| 6.0.0 |
Sources
- osv: GHSA-28xh-wpgr-7fm8
- https://github.com/pwnall/node-open/issues/68
- https://github.com/pwnall/node-open/issues/69
- https://hackerone.com/reports/319473
- https://www.npmjs.com/advisories/663
published · modified · JSON