VYPR

npm package

node-prompt-here

pkg:npm/node-prompt-here

Vulnerabilities (1)

  • CVE-2020-7602Mar 15, 2020
    affected <= 1.0.1

    node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the a