CVE-2022-25865
1 advisory.
npm/workspace-tools CVE-2022-25865: critical 9.8
Command injection in workspace-tools
Action: Upgrade workspace-tools to 0.18.4 or later.
npm i workspace-tools@0.18.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.18.4 | - |
Fixed versions
| 0.18.4 |
Sources
- osv: GHSA-5875-m6jq-vf78
- https://nvd.nist.gov/vuln/detail/CVE-2022-25865
- https://github.com/microsoft/workspace-tools/pull/103
- https://github.com/microsoft/workspace-tools/commit/9bc7e65ce497f87e1f363fd47b8f802f3d3cd978
- https://github.com/microsoft/workspace-tools
- https://snyk.io/vuln/SNYK-JS-WORKSPACETOOLS-2421201
CVE-2022-25865 · published · modified · JSON