Description
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | diskusage-ng | All versions including 0.2.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | diskusage-ng | <= 0.2.4 | — | GHSA-3269-x4pw-vffg |