dottgonzo/node-promise-probe

dottgonzo/node-promise-probe

Releases13
Frequency2 months 4 weeks
Last Release

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL7.5 HIGH

promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization.