Skip to content
OpenAdvisories

Package · npm

cocos-utils

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-rffp-mc78-wjf7

    Command Injection in cocos-utils

    All versions of `cocos-utils` are vulnerable to Remote Code Execution. The `unzip()` function concatenates user input to `exec()` which may allow attackers to execute arbitrary commands on the server. ## Recommendation No fix is currently available. Consider …

    cocos-utils npm