Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/fs-path@0.0.8
purl pkg:npm/fs-path@0.0.8
Next non-vulnerable version 0.0.25
Latest non-vulnerable version 0.0.25
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
npm-423

Command Injection - Generic `fs-path` concatenates unsanitized input into exec()/execSync() commands There are no reported fixed by versions.
GHSA-8mrf-64fw-2x75
Aliases:
CVE-2020-8298
Command injection in fs-path fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via …
0.0.25
Not vulnerable
GHSA-gc94-6w89-hpqr
Aliases:
GMS-2019-124
Command Injection in fs-path All versions of `fs-path` are vulnerable to command injection is unsanitized user input is passed in. …
0.0.25
Not vulnerable
This package is not known to fix any advisories.