npm package
lifion-verify-deps
pkg:npm/lifion-verify-deps
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-34078 | Hig | 8.8 | < 1.2.0 | 1.2.0 | Jun 2, 2022 | lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file. |
- affected < 1.2.0fixed 1.2.0
lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.