VYPR

npm package

lifion-verify-deps

pkg:npm/lifion-verify-deps

Vulnerabilities (1)

  • CVE-2021-34078Jun 1, 2022
    affected < 1.2.0fixed 1.2.0

    lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.