Product

npm exec-local-bin vulnerabilities

1 published CVE affecting npm exec-local-bin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest npm exec-local-bin CVEs

Newest publication first

CVE-2022-25923 exec-local-bin vulnerable to Command Injection
Published 2023-01-06

CriticalCVSS 9.8 EPSS 2.6%

Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to improper user-input sanitization.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

npm exec-local-bin vulnerabilities

Latest npm exec-local-bin CVEs

CVE-2022-25923 exec-local-bin vulnerable to Command Injection