npm package
puppet-facter
pkg:npm/puppet-facter
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-25350 | Hig | 7.4 | <= 0.0.2 | — | Jan 26, 2023 | All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization. |
- affected <= 0.0.2
All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization.