npm/ascii-art: low
Command Injection in ascii-art
Action: Upgrade ascii-art to 1.4.4 or later.
npm i ascii-art@1.4.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.4 | - |
Fixed versions
| 1.4.4 |
Sources
- osv: GHSA-9hqj-38j2-5jgm
- https://hackerone.com/reports/390631
- https://github.com/nodejs/security-wg/blob/master/vuln/npm/471.json
- https://www.npmjs.com/advisories/727
published · modified · JSON