GitHub Advisoryadvisory · npm

GHSA-jfm8-hwhg-r6gg p4 vulnerable to Command Injection due to improper input sanitization

HIGH Published 2022-12-20 Modified 2025-04-16 Official page ↗

Aliases: CVE-2022-25171
Ecosystem: npm
Packages: p4
Severity: High
CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-78
Reviewed: 2022-12-20

Affected packages

• npm p4: < 0.0.7 → fixed in 0.0.7

Description

The package p4 before 0.0.7 is vulnerable to Command Injection via the run() function due to improper input sanitization

Related

Alias · CVE (1)

CVE-2022-25171 The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization vulnerability

Weakness · CWE (1)

CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References