npm/screenshot-desktop CVE-2025-55294: critical 9.8, EPSS 1.44%
screenshot-desktop vulnerable to command Injection via `format` option
Action: Upgrade screenshot-desktop to 1.15.2 or later.
npm i screenshot-desktop@1.15.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.2 | - |
Fixed versions
| 1.15.2 |
Sources
- osv: GHSA-gjx4-2c7g-fm94
- https://github.com/bencevans/screenshot-desktop/security/advisories/GHSA-gjx4-2c7g-fm94
- https://nvd.nist.gov/vuln/detail/CVE-2025-55294
- https://github.com/bencevans/screenshot-desktop/commit/59c87b0c175eec76090e6ccde313f4fc5d569b78
- https://github.com/bencevans/screenshot-desktop
CVE-2025-55294 · published · modified · JSON