CVE-2022-25926

Published January 4th, 2023

View on NVD ↗

CVSS v3

7.4

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization.

bruno-robert/window-control

An npm package that provides tools to manage window focus (maybe more later)

GitHub