OS Command Injection In node-key-sender
Description
OS Command Injection in node-key-sender node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument in the 'execute()' function.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
npm |
Aliases
1. 2. 3. 4.
References
1.