Skip to content
OpenAdvisories

Package · npm

priest-runner

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-9px9-f7jw-fwhj

    Command Injection in priest-runner

    All versions of `priest-runner` are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to a `spawn` call, which may allow attackers to execute arbitrary code in the system. The `PriestController.prototype.createChild `…

    priest-runner npm