Skip to content
OpenAdvisories

Package · npm

bestzip

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2020-7730

    Command Injection

    The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.

    bestzip npm
  • Critical —
    GHSA-4qqc-mp5f-ccv4

    Command Injection in bestzip

    Versions of `bestzip` prior to 2.1.7 are vulnerable to Command Injection. The package fails to sanitize input rules and passes it directly to an `exec` call on the `zip` function . This may allow attackers to execute arbitrary code in the system as long as th…

    bestzip npm