Description (CNA)
heroku-addonpool through 0.1.15 is vulnerable to Command Injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / heroku-addonpool | affected All versions including 0.1.15 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-JS-HEROKUADDONPOOL-564428
- https://github.com/nodef/heroku-addonpool/blob/master/index.js
ADP enrichment
No English description supplied.