npm/proctree CVE-2021-34082: high, EPSS 4.78%
OS Command Injection in proctree
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-cv76-rv4h-4mqc
- https://nvd.nist.gov/vuln/detail/CVE-2021-34082
- https://advisory.checkmarx.net/advisory/CX-2021-4783
- https://github.com/allenhwkim/proctree
- https://github.com/allenhwkim/proctree/blob/master/index.js#L46
CVE-2021-34082 · published · modified · JSON