pillys/fs-path · Security
Command Injection in fs-path
- GHSA ID
- GHSA-gc94-6w89-hpqr
- Severity
- high
- Published
- Updated
Description
All versions of fs-path are vulnerable to command injection is unsanitized user input is passed in.
Recommendation
No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available.
CWEs
- CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')