漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NPM eslint-fixer 命令注入漏洞
Vulnerability Description
NPM eslint-fixer是美国npm(NPM)公司的一个开发模块。提供了基于诺言的功能,可以应用于eslint --fix给定的目录或文件。 eslint-fixer package through 0.1.5 for Node.js 存在命令注入漏洞,该漏洞允许通过shell元字符向fix函数注入命令。
CVSS Information
N/A
Vulnerability Type
N/A