Description
umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | install-package | All versions including 1.1.6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | umount | <= 1.1.6 | — | GHSA-6q48-vjq2-mwcj |