@runnerty/executor-decompress vulnerabilities
1 known vulnerability in @runnerty/executor-decompress from Runnerty. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
@runnerty/executor-decompress: Improper Neutralization of Special Elements used in an OS Command
@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compress_file. Attackers who can name a file dropped into a watched directory can in