Description
All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-VAGRANTJS-3175614
Related Vulnerabilities
CVE-2022-26112 Vulnerability in maven package org.apache.pinot:pinot-broker
CVE-2021-39133 Vulnerability in maven package org.rundeck:rundeck
CVE-2019-10385 Vulnerability in maven package org.jenkins-ci.plugins:eggplant-plugin
CVE-2016-1000339 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2020-13946 Vulnerability in maven package org.apache.cassandra:cassandra-all