**Note:**
To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target environment. This typically requires some level of access to the system or application hosting the Node.js environment.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | keep-module-latest | affected |
|
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-1645 | All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. **Note:** To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target environment. This typically requires some level of access to the system or application hosting the Node.js environment. |
 Github GHSA |
GHSA-wxrx-pc44-rcgc | keep-module-latest vulnerable to Command Injection due to missing input sanitization |
Mon, 13 Jan 2025 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: snyk
Published:
Updated: 2025-01-13T21:22:26.003Z
Reserved: 2023-02-20T10:28:48.924Z
Link: CVE-2023-26128
Vulnrichment
Updated: 2024-08-02T11:39:06.653Z
NVD
Status : Modified
Published: 2023-05-27T05:15:09.860
Modified: 2025-01-13T22:15:09.220
Link: CVE-2023-26128
Redhat
No data.
OpenCVE Enrichment
No data.