Описание
heroku-env susceptible to command injection
A command injection vulnerability affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.
Пакеты
Наименование
heroku-env
npm
Затронутые версииВерсия исправления
<= 0.2.0
Отсутствует
Связанные уязвимости
CVSS3: 9.4
nvd
больше 3 лет назад
This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.