Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

CVE-2022-21191

global-modules-path: Command Injection due to missing Input Sanitization

Versions of the package global-modules-path before 3.0.0 are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the getPath function.

CVSS 3.1 · 7.4 High EPSS 1.5% KEV · Not listed
Vendors
Global-modules-path Project
Products
Global-modules-path