~ / search / GHSA-9mjx-wfqp-j5ph

GHSA-9mjx-wfqp-j5ph

window-control vulnerable to Command Injection due to improper input sanitization

Source: GitHub Advisory Database (reviewed) High CVE-2022-25926

Packages

EcosystemPackageAffectedFixed in
npm window-control < 1.4.5 1.4.5

Details

As written in the advisory (Markdown source, shown as plain text).

window-control is an npm package that provides tools to manage window focus. Versions before 1.4.5 are vulnerable to Command Injection via the `sendKeys` function due to improper input sanitization.

References

External links from the advisory. They lead to third-party sites.