Npm-dependency-versions vulnerabilities

1 known vulnerability in Npm-dependency-versions from Npm-dependency-versions Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Npm-dependency-versions: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-29080Apr 12, 2022Npm-dependency-versions ProjectEPSS 2.18%

  The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions with a JSON object in which pkgs is a key, and there are shell metacharacters in a value.