Skip to content
OpenAdvisories

Package · npm

wiki-plugin-datalog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    GHSA-pm52-wwrw-c282

    Command Injection in wiki-plugin-datalog

    Versions of `wiki-plugin-datalog` prior to 0.1.6 are vulnerable to Command Injection. The package failed to sanitize URLs on the curl endpoint, allowing attackers to inject commands and possibly achieving Remote Code Execution on the system. ## Recommendation…

    wiki-plugin-datalog npm