Skip to content
OpenAdvisories
High · 7.4 CVE-2022-25916 EUVD-2023-0630GHSA-5h8c-8ccp-8gmh

mt7688-wiscan is vulnerable to Command Injection due to improper input sanitization

Published Feb 1, 2023 · Updated Mar 27, 2025 · Assigned by snyk

Description

Versions of the package mt7688-wiscan before 0.8.3 are vulnerable to Command Injection due to improper input sanitization in the 'wiscan.scan' function.

Affected products

VendorProductAffectedFixed
— mt7688-wiscan < 0.8.3 0.8.3

Affected packages

EcosystemPackageAffectedFixedRecord
npm mt7688-wiscan < 0.8.3 0.8.3 GHSA-5h8c-8ccp-8gmh

References