Skip to content

Commit

Permalink
vuln: add latest sec release (#1278)
Browse files Browse the repository at this point in the history
  • Loading branch information
RafaelGSS authored Apr 12, 2024
1 parent 96ad6cc commit 8a468a3
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions vuln/core/141.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
{
"cve": [
"CVE-2024-27982"
],
"vulnerable": "18.x || 20.x || 21.x",
"patched": "^18.20.2 || ^20.12.2 || ^21.7.3",
"ref": "https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2/",
"overview": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.",
"affectedEnvironments": [
"win32"
]
}

0 comments on commit 8a468a3

Please sign in to comment.