Description
A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.
Remediation
References
https://hackerone.com/reports/703412
Related Vulnerabilities
CVE-2022-21211 Vulnerability in npm package posix
CVE-2019-20149 Vulnerability in maven package org.webjars.bowergithub.jonschlinkert:kind-of
CVE-2019-10307 Vulnerability in maven package org.jvnet.hudson.plugins:analysis-core
CVE-2020-8131 Vulnerability in maven package org.webjars.npm:yarn
CVE-2016-0785 Vulnerability in maven package org.apache.struts.xwork:xwork-core