The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js.Read More ...
Continue Reading
July 25, 2022
This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This c ...
Continue Reading
July 25, 2022
This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.Read More ...
Continue Reading
July 25, 2022
This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.jsRead More ...
Continue Reading
July 25, 2022
This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.Read More ...
Continue Reading
July 25, 2022
All versions of package git-archive are vulnerable to Command Injection via the exports function.Read More ...
Continue Reading
July 25, 2022
This affects all versions of package google-cloudstorage-commands.Read More ...
Continue Reading
July 25, 2022
The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager.Read More ...
Continue Reading
July 25, 2022
Back to Main
