Skip to content
OpenAdvisories

Package · npm

require-node

1 known vulnerabilities.

1 result · Feed

  • Critical —

    Arbitrary Code Execution in require-node

    Versions of `require-node` prior to 1.3.4 for 1.x and 2.0.4 for 2.x are vulnerable to Arbitrary Code Execution. The package fails to sanitize requests to the `require-node` endpoint, allowing attackers to execute arbitrary code in the server through the injec…