Description
The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @rkesters/gnuplot | < 0.1.1 | 0.1.1 | GHSA-f2jw-pr2c-9x96 |
Critical · 9.8
CVE-2021-29369
EUVD-2022-0968GHSA-f2jw-pr2c-9x96
Code injection in @rkesters/gnuplot
Published May 3, 2021 · Updated Aug 3, 2024 · Assigned by mitre