npm command-exists vulnerabilities

Latest npm command-exists CVEs

Newest publication first

1. GHSA-cff4-rrq6-h78w Command Injection in command-exists

   Published 2019-06-03

   Unknown

   Versions of command-exists before 1.2.4 are vulnerable to command injection. This is exploitable if user input is provided to this module. Recommendation Update to version 1.2.4 or later.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.