← All advisories

High severity7.4NVD Advisory· Published Dec 20, 2022· Updated Jun 17, 2026

CVE-2022-25171

CVE-2022-25171

Description

The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
p4npm	< 0.0.7	0.0.7

Affected products

3

ghsa-coords
pkg:npm/p4
Range: < 0.0.7
p4/p4description
P4 Project/P4
cpe:2.3:a:p4_project:p4:*:*:*:*:*:node.js:*:*
Range: <0.0.7

Patches

Vulnerability mechanics

References

6

github.com/natelong/p4/commit/ae42e251beabf67c00539ec0e1d7aa149ca445fbnvdPatchThird Party AdvisoryWEB
security.snyk.io/vuln/SNYK-JS-P4-3167330nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-jfm8-hwhg-r6ggghsaADVISORY
github.com/natelong/p4/blob/master/p4.js%23L12nvdBroken LinkThird Party Advisory
nvd.nist.gov/vuln/detail/CVE-2022-25171ghsaADVISORY
github.com/natelong/p4/blob/master/p4.jsghsaWEB

News mentions

0

No linked articles in our index yet.