CVE-2024-39943
1 advisory.
npm/hfs CVE-2024-39943: critical 9.9, EPSS 39.47%
rejetto HFS vulnerable to OS Command Execution by remote authenticated users
Action: Upgrade hfs to 0.52.10 or later.
npm i hfs@0.52.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.52.10 | - |
Fixed versions
| 0.52.10 |
Sources
- osv: GHSA-5f4x-hwv2-w9w2
- https://nvd.nist.gov/vuln/detail/CVE-2024-39943
- https://github.com/rejetto/hfs/commit/305381bd36eee074fb238b64302a252668daad1d
- https://github.com/rejetto/hfs
- https://github.com/rejetto/hfs/compare/v0.52.9...v0.52.10
- https://www.rejetto.com/wiki/index.php/HFS:_Working_with_uploads
CVE-2024-39943 · published · modified · JSON