Description
All versions of the package wifey are vulnerable to Command Injection via the connect() function due to improper input sanitization.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-WIFEY-3175615
Related Vulnerabilities
CVE-2020-28269 Vulnerability in npm package field
CVE-2019-13127 Vulnerability in maven package org.webjars.npm:mxgraph
CVE-2021-41042 Vulnerability in maven package org.eclipse.lyo:lyo-parent
CVE-2022-27263 Vulnerability in npm package strapi
CVE-2020-27219 Vulnerability in maven package org.eclipse.hawkbit:hawkbit-update-server