Whereis

CVEs (1)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2018-3772	Whereis Project Whereis	Cri	0.57	9.8	0.03		Jul 30, 2018	Concatenating unsanitized user input in the `whereis` npm module < 0.4.1 allowed an attacker to execute arbitrary commands. The `whereis` module is deprecated and it is recommended to use the `which` npm module instead.

CVE-2018-3772CriJul 30, 2018
Whereis Project
Whereis
risk 0.57cvss 9.8epss 0.03
Concatenating unsanitized user input in the `whereis` npm module < 0.4.1 allowed an attacker to execute arbitrary commands. The `whereis` module is deprecated and it is recommended to use the `which` npm module instead.