Description
A command injection vulnerability in libnmapp package for versions <0.4.16 allows arbitrary commands to be executed via arguments to the range options.
Remediation
References
https://hackerone.com/reports/390865
Related Vulnerabilities
CVE-2021-32860 Vulnerability in maven package org.webjars.npm:izimodal
CVE-2022-24198 Vulnerability in maven package com.itextpdf:itext7-core
CVE-2020-14966 Vulnerability in maven package org.webjars.bower:jsrsasign
CVE-2019-15609 Vulnerability in npm package kill-port-process
CVE-2022-24785 Vulnerability in maven package org.webjars.bower:moment