Skip to content
OpenAdvisories

Package · npm

wxchangba

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-j6v9-xgvh-f796

    Command Injection in wxchangba

    All versions of `wxchangba` are vulnerable to Command Injection. The package does not validate user input on the `reqPostMaterial` function, passing contents of the `file` parameter to an exec call. This may allow attackers to run arbitrary commands in the sy…

    wxchangba npm