Description
A command injection vulnerability in libnmapp package for versions <0.4.16 allows arbitrary commands to be executed via arguments to the range options.
Remediation
References
https://hackerone.com/reports/390865
Related Vulnerabilities
CVE-2020-7787 Vulnerability in npm package react-adal
CVE-2022-45921 Vulnerability in maven package io.fusionauth:fusionauth-java-client
CVE-2019-16728 Vulnerability in maven package org.webjars.bowergithub.cure53:dompurify
CVE-2020-15084 Vulnerability in npm package express-jwt
CVE-2015-2944 Vulnerability in maven package org.apache.sling:org.apache.sling.api