GitHub Advisoryadvisory · npm

GHSA-gc94-6w89-hpqr Command Injection in fs-path

HIGH Published 2019-06-12 Modified 2021-09-16 Official page ↗
Ecosystem
npm
Packages
fs-path
Severity
High
Weaknesses
CWE-77
Reviewed
2019-06-12

Affected packages

• npm fs-path: < 0.0.25 → fixed in 0.0.25

Description

All versions of `fs-path` are vulnerable to command injection is unsanitized user input is passed in. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available.

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References