Description
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument.
Remediation
References
https://github.com/iximiuz/node-diskusage-ng/blob/master/lib/posix.js#L11
https://snyk.io/vuln/SNYK-JS-DISKUSAGENG-564425
Related Vulnerabilities
CVE-2023-35142 Vulnerability in maven package com.checkmarx.jenkins:checkmarx
CVE-2019-5414 Vulnerability in npm package kill-port
CVE-2022-0776 Vulnerability in npm package reveal.js
CVE-2020-5245 Vulnerability in maven package io.dropwizard:dropwizard-validation
CVE-2021-3717 Vulnerability in maven package org.wildfly.core:wildfly-core-parent