Skip to content

Commit

Permalink
vuln: update core index.json (#1279)
Browse files Browse the repository at this point in the history
Co-authored-by: Create or Update Pull Request Action <[email protected]>
  • Loading branch information
github-actions[bot] and Create or Update Pull Request Action authored Apr 13, 2024
1 parent 8a468a3 commit c72d744
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions vuln/core/index.json
Original file line number Diff line number Diff line change
Expand Up @@ -1738,5 +1738,17 @@
"affectedEnvironments": [
"all"
]
},
"141": {
"cve": [
"CVE-2024-27982"
],
"vulnerable": "18.x || 20.x || 21.x",
"patched": "^18.20.2 || ^20.12.2 || ^21.7.3",
"ref": "https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2/",
"overview": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.",
"affectedEnvironments": [
"win32"
]
}
}

0 comments on commit c72d744

Please sign in to comment.