Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/traceroute@0.0.2
purl pkg:npm/traceroute@0.0.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-8j9v-qhp4-wv55
Aliases:
CVE-2018-21268
Node-Traceroute RCE Vulnerability The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. … There are no reported fixed by versions.
GHSA-rjvj-673q-4hfw
Aliases:
GMS-2020-538
Command Injection in traceroute All versions of `traceroute` are vulnerable to Command Injection. The package fails to sanitize input and … There are no reported fixed by versions.
This package is not known to fix any advisories.