Skip to content
OpenAdvisories

Package · npm

command-exists

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical —
    GHSA-cff4-rrq6-h78w

    Command Injection in command-exists

    Versions of `command-exists` before 1.2.4 are vulnerable to command injection. This is exploitable if user input is provided to this module. ## Recommendation Update to version 1.2.4 or later.

    command-exists npm