GitHub Advisoryadvisory · npm

GHSA-4rq4-32rv-6wp6 Improper Privilege Management in shelljs

HIGH Published 2022-01-21 Modified 2022-01-21 Official page ↗

Aliases: CVE-2022-0144
Ecosystem: npm
Packages: shelljs
Severity: High
CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weaknesses: CWE-269
Reviewed: 2022-01-21

Affected packages

• npm shelljs: < 0.8.5 → fixed in 0.8.5

Description

shelljs is vulnerable to Improper Privilege Management

Related

Alias · CVE (1)

CVE-2022-0144 shelljs is vulnerable to Improper Privilege Management vulnerability

Weakness · CWE (1)

CWE-269 Improper Privilege Management weakness

References