GHSA-w5mp-8p8w-mhh8
Command injection in connection-tester
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | connection-tester | < 0.2.1 | 0.2.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. Affected versions of this package are vulnerable to Command Injection
References
External links from the advisory. They lead to third-party sites.