Description
All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.
Remediation
References
https://snyk.io/vuln/SNYK-JS-LSOF-543632
Related Vulnerabilities
CVE-2021-32860 Vulnerability in npm package izimodal
CVE-2021-3190 Vulnerability in npm package async-git
CVE-2021-3810 Vulnerability in npm package code-server
CVE-2020-8441 Vulnerability in maven package org.jyaml:jyaml
CVE-2022-31166 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore