CVE-2022-25908
All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - report@snyk.io
- Published
- 2023-01-26
- Last modified
- 2025-04-01
- Weaknesses
- CWE-77, CWE-78
Affected products
References
- https://security.snyk.io/vuln/SNYK-JS-CREATECHOOELECTRON-3157953
