Skip to content
OpenAdvisories

Package · npm

clamscan

1 known vulnerabilities.

1 result · Feed

  • High 8.1

    Clamscan vulnerable to command injection

    clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that this vulnerability requires a pre-requisite that a folder sho…