GHSA-54jw-jqr9-6cj9
Command injection in vagrant.js
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | vagrant.js | <= 0.0.4 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.
References
External links from the advisory. They lead to third-party sites.