Skip to content
OpenAdvisories

Package · npm

expressfs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-mxmj-84q8-34r7

    Command Injection in expressfs

    All versions of `expressfs` are vulnerable to Command Injection. The package does not validate user input on several API endpoints, allowing attackers to run arbitrary commands in the system. The affected endpoints are: `expressfs.appendFile`, `expressfs.cp`,…

    expressfs npm