Description
All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.
Remediation
References
https://snyk.io/vuln/SNYK-JS-LSOF-543632
Related Vulnerabilities
CVE-2022-29770 Vulnerability in maven package com.xuxueli:xxl-job
CVE-2022-34305 Vulnerability in maven package org.apache.tomcat:tomcat
CVE-2019-10742 Vulnerability in maven package org.webjars.npm:axios
CVE-2023-26115 Vulnerability in npm package word-wrap
CVE-2020-17519 Vulnerability in maven package org.apache.flink:flink-runtime_2.12