~ / search / GHSA-vh8f-xw5v-8993

GHSA-vh8f-xw5v-8993

Command Injection in macfromip

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-7786

Packages

EcosystemPackageAffectedFixed in
npm macfromip <= 1.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of npm package macfromip are affected by a command injection vulnerability. The injection point is located in line 66 in macfromip.js.

References

External links from the advisory. They lead to third-party sites.