CVE-2022-0841
1 advisory.
npm/npm-lockfile CVE-2022-0841: critical 9.8, EPSS 2.51%
OS Command injection in npm-lockfile
Action: Upgrade npm-lockfile to 2.0.5 or later.
npm i npm-lockfile@2.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.3 | 2.0.5 | - |
Fixed versions
| 2.0.5 |
Sources
- osv: GHSA-cr6m-62pq-hmqh
- https://nvd.nist.gov/vuln/detail/CVE-2022-0841
- https://github.com/ljharb/npm-lockfile/commit/bfdb84813260f0edbf759f2fde1e8c816c1478b8
- https://github.com/ljharb/npm-lockfile
- https://huntr.dev/bounties/4f806dc9-2ecd-4e79-997e-5292f1bea9f1
CVE-2022-0841 · published · modified · JSON