Skip to content
OpenAdvisories

Package · npm

soletta-dev-app

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-8mgg-5x65-m4m4

    Command Injection in soletta-dev-app

    All versions of `soletta-dev-app` are vulnerable to Command Injection. The package does not validate user input on the `/api/service/status` API endpoint, passing contents of the `service` query parameter to an exec call. This may allow attackers to run arbit…

    soletta-dev-app npm