Description (CNA)
The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / bestzip | affected unspecified before 2.1.7 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-JS-BESTZIP-609371
- https://github.com/nfriedly/node-bestzip/commit/45d4a901478c6a8f396c8b959dd6cf8fd3f955b6
ADP enrichment
No English description supplied.