npm/puppet-facter CVE-2022-25350: high 7.8, EPSS 1.22%
Command Injection in puppet-facter
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g5qr-xgg7-8q2w
- https://nvd.nist.gov/vuln/detail/CVE-2022-25350
- https://github.com/olindata/node-puppet-facter/blob/f34bcc754325d71bb3b1b534804e53d6170f15f5/index.js#23L10
- https://security.snyk.io/vuln/SNYK-JS-PUPPETFACTER-3175616
CVE-2022-25350 · published · modified · JSON