npm/command-exists: critical
Command Injection in command-exists
Action: Upgrade command-exists to 1.2.4 or later.
npm i command-exists@1.2.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.4 | - |
Fixed versions
| 1.2.4 |
Sources
- osv: GHSA-cff4-rrq6-h78w
- https://github.com/mathisonian/command-exists/commit/7ca91ba71604df6817a28c93d7776af9c49c431a
- https://hackerone.com/reports/324453
- https://github.com/mathisonian/command-exists/blob/v1.2.2/lib/command-exists.js#L49-L94
- https://www.npmjs.com/advisories/659
published · modified · JSON