VYPR

npm package

find-exec

pkg:npm/find-exec

Vulnerabilities (1)

  • CVE-2023-40582Aug 30, 2023
    affected < 1.0.3fixed 1.0.3

    find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input and are vulnerable to Command Injection via an attacker controlled parameter. As a result, attackers may run malicious shell commands in the context of the runn