CVE-2022-25916
1 advisory.
npm/mt7688-wiscan CVE-2022-25916: high 7.8
mt7688-wiscan is vulnerable to Command Injection due to improper input sanitization
Action: Upgrade mt7688-wiscan to 0.8.3 or later.
npm i mt7688-wiscan@0.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.3 | - |
Fixed versions
| 0.8.3 |
Sources
- osv: GHSA-5h8c-8ccp-8gmh
- https://nvd.nist.gov/vuln/detail/CVE-2022-25916
- https://github.com/simenkid/mt7688-wiscan/commit/ff6d6567c65b4e972916a8fbc4533212f20a2fa5
- https://github.com/simenkid/mt7688-wiscan
- https://github.com/simenkid/mt7688-wiscan/blob/master/index.js%23L22
- https://security.snyk.io/vuln/SNYK-JS-MT7688WISCAN-3177394
CVE-2022-25916 · published · modified · JSON