CVE-2022-25923
1 advisory.
npm/exec-local-bin CVE-2022-25923: critical 9.8
exec-local-bin vulnerable to Command Injection
Action: Upgrade exec-local-bin to 1.2.0 or later.
npm i exec-local-bin@1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GHSA-f259-h6m8-hm8m
- https://nvd.nist.gov/vuln/detail/CVE-2022-25923
- https://github.com/saeedseyfi/exec-local-bin/commit/d425866375c85038133a6f79db2aac66c0a72624
- https://github.com/saeedseyfi/exec-local-bin
- https://github.com/saeedseyfi/exec-local-bin/blob/92db00bde9d6e2d83410849f898df12f075b73b0/index.js%23L9
- https://security.snyk.io/vuln/SNYK-JS-EXECLOCALBIN-3157956
CVE-2022-25923 · published · modified · JSON