GHSA-3c6g-pvg8-gqw2HighCVSS 7.2

trentm/json vulnerable to command injection

Published
May 6, 2021
Last Modified
September 11, 2023

🔗 CVE IDs covered (1)

CVE-2020-7712 →

📋 Description

This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.

🎯 Affected products2

  • npm/json:< 10.0.0
  • maven/org.webjars.npm:json:<= 9.0.6

🔗 References (24)