CVE-2021-23378
1 advisory.
npm/picotts CVE-2021-23378: critical 9.8, EPSS 1.94%
Command Injection in picotts
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wq7q-5v6j-xfv6
- https://nvd.nist.gov/vuln/detail/CVE-2021-23378
- https://github.com/luisivan/node-picotts
- https://github.com/luisivan/node-picotts/blob/8c6b183b884890c8e9422f93036b374942398c8b/index.js#23L16
- https://snyk.io/vuln/SNYK-JS-PICOTTS-1078539
CVE-2021-23378 · published · modified · JSON