Description
All versions of package launchpad are vulnerable to Command Injection via stop.
Remediation
References
https://github.com/bitovi/launchpad/issues/123%23issuecomment-732188118
https://github.com/bitovi/launchpad/pull/124
https://snyk.io/vuln/SNYK-JS-LAUNCHPAD-1044065
Related Vulnerabilities
CVE-2022-21830 Vulnerability in npm package @rocket.chat/livechat
CVE-2022-37616 Vulnerability in npm package @xmldom/xmldom
CVE-2020-11059 Vulnerability in npm package aegir
CVE-2021-37306 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base
CVE-2018-5673 Vulnerability in maven package org.webjars.bower:dojo