← All advisories

High severity7.1NVD Advisory· Published Jan 11, 2022· Updated Jun 17, 2026

CVE-2022-0144

CVE-2022-0144

Description

shelljs is vulnerable to Improper Privilege Management

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
shelljsnpm	< 0.8.5	0.8.5

Affected products

3

Shelljs Project/Shelljs
cpe:2.3:a:shelljs_project:shelljs:*:*:*:*:*:node.js:*:*
Range: <0.8.5
ghsa-coords
pkg:npm/shelljs
Range: < 0.8.5
shelljs/shelljs/shelljsv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/shelljs/shelljs/commit/d919d22dd6de385edaa9d90313075a77f74b338cnvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679cnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-4rq4-32rv-6wp6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0144ghsaADVISORY

News mentions

0

No linked articles in our index yet.