CVE-2023-26128
1 advisory.
npm/keep-module-latest CVE-2023-26128: high 8.4, EPSS 1.19%
keep-module-latest vulnerable to Command Injection due to missing input sanitization
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wxrx-pc44-rcgc
- https://nvd.nist.gov/vuln/detail/CVE-2023-26128
- https://github.com/liujunyang/keep-module-latest
- https://github.com/liujunyang/keep-module-latest/blob/master/index.js%23L50
- https://security.snyk.io/vuln/SNYK-JS-KEEPMODULELATEST-3157165
CVE-2023-26128 · published · modified · JSON