Description
This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function.
Remediation
References
https://security.netapp.com/advisory/ntap-20220901-0012/
https://security.snyk.io/vuln/SNYK-JS-NPMHELP-1050983
Related Vulnerabilities
CVE-2018-20843 Vulnerability in npm package dbus
CVE-2018-14732 Vulnerability in maven package org.webjars.npm:webpack-dev-server
CVE-2022-0839 Vulnerability in maven package org.liquibase:liquibase-core
CVE-2023-22465 Vulnerability in maven package org.http4s:http4s-core_2.12
CVE-2021-39233 Vulnerability in maven package org.apache.ozone:ozone-main