Description (CNA)
All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / lsof | affected All versions |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.