Npm-dependency-versions Project vulnerabilities
We track 1 vulnerability in Npm-dependency-versions Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 12, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Npm-dependency-versions Project vulnerabilities
- 9.8 Critical severity
Npm-dependency-versions: Improper Neutralization of Special Elements used in an OS Command
The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions with a JSON object in which pkgs is a key, and there are shell metacharacters in a value.