CVE-2022-21129
1 advisory.
npm/nemo-appium CVE-2022-21129: critical 9.8, EPSS 2.77%
nemo-appium vulnerable to OS Command Injection
Action: Upgrade nemo-appium to 0.0.9 or later.
npm i nemo-appium@0.0.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.9 | - |
Fixed versions
| 0.0.9 |
Sources
- osv: GHSA-c6rx-gxqv-vr5j
- https://nvd.nist.gov/vuln/detail/CVE-2022-21129
- https://github.com/paypal/nemo-appium/commit/aa271d36dd5c81baae3c43aa2616c84f0ee4195f
- https://github.com/paypal/nemo-appium
- https://github.com/paypal/nemo-appium/blob/master/index.js%23L27
- https://security.snyk.io/vuln/SNYK-JS-NEMOAPPIUM-3183747
CVE-2022-21129 · published · modified · JSON