Skip to content
OpenAdvisories

Package · npm

openssl

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    openssl npm package vulnerable to command execution

    The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, and accepts an opts argument that contains a verb field (used for command execution). NOTE: This vulnerability only affects …