CVE-2022-0841

OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@huntr.dev

Published

2022-03-03

Last modified

2024-08-02

Weaknesses

CWE-78

Affected products

• Ljharbnpm-lockfile (Ljharb)
• Npm-lockfile (Npm-lockfile Project)

References

• https://github.com/ljharb/npm-lockfile/commit/bfdb84813260f0edbf759f2fde1e8c816c1478b8
• https://huntr.dev/bounties/4f806dc9-2ecd-4e79-997e-5292f1bea9f1