GitHub Advisoryadvisory · npm

GHSA-6jvg-hp25-42f6 Nteract Remote Code Execution vulnerability

MEDIUM Published 2024-03-01 Modified 2024-03-01 Official page ↗

Aliases: CVE-2024-22891
Ecosystem: npm
Packages: nteract
Severity: Moderate
Weaknesses: CWE-94
Reviewed: 2024-03-01

Affected packages

• npm nteract: <= 0.28.0 (no fix yet)

Description

Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.

Related

Alias · CVE (1)

CVE-2024-22891 Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link. vulnerability

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

References