Blamer vulnerabilities
We track 1 vulnerability in Blamer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 19, 2023.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Blamer vulnerabilities
- 9.1 Critical severity
blamer: Improper Neutralization of Argument Delimiters in a Command
Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile() API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-