whereis
NPM
Releases8
Frequency9 months 2 weeks
Last Release
Which/Whereis easy helper, find if a program exists
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 0.4.1 | — | 7.5 HIGH | ||
Concatenating unsanitized user input in the `whereis` npm module < 0.4.1 allowed an attacker to execute arbitrary commands. The `whereis` module is deprecated and it is recommended to use the `which` npm module instead. | ||||