Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-gc94-6w89-hpqr
Advisory ID github_osv/GHSA-gc94-6w89-hpqr
Aliases
Summary Command Injection in fs-path All versions of `fs-path` are vulnerable to command injection is unsanitized user input is passed in. ## Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
System Score Found at
generic_textual HIGH
Reference id Reference type URL
https://github.com/pillys/fs-path
https://github.com/pillys/fs-path/pull/5
https://hackerone.com/reports/324491
https://www.npmjs.com/advisories/661
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.