Description
lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | lifion-verify-deps | < 1.2.0 | 1.2.0 | GHSA-rphm-c8gw-3r38 |