Description
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | logkitty | Fixed Version: 0.7.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | logkitty | < 0.7.1 | 0.7.1 | GHSA-v8v8-6859-qxm4 |