CVE-2019-10801
OS Command Injection in enpeem
Summary
OS Command Injection in enpeem
Original description
The description as published by the source.
enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
enpeem
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"2.2.0"}]}]
References
- advisory nvd.nist.gov
- web github.com
- web snyk.io