lifion/lifion-verify-deps

lifion/lifion-verify-deps

GitHubGitHub
GitHubgithub.com
Releases10
Frequency4 months 1 day
Last Release
Stars3
Checks that installed NPM modules are the latest currently available version.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-34078↗
8.8 HIGH9.3 HIGH

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.