CVE-2021-34078

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file

published June 1, 2022

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02409 · 84.0th percentile
Published
2022-06-01T14:31Z
EPSS history
Timeline
  • 01 JUN 14:31Z
    lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file
    cvelistv5