Description
All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.
Remediation
References
https://snyk.io/vuln/SNYK-JS-LSOF-543632
Related Vulnerabilities
CVE-2021-39154 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-31717 Vulnerability in npm package @frangoteam/fuxa
CVE-2021-3690 Vulnerability in maven package io.undertow:undertow-core
CVE-2022-22984 Vulnerability in npm package @snyk/snyk-hex-plugin
CVE-2022-29648 Vulnerability in maven package com.jflyfox:jflyfox_jfinal