CRITICAL9.8
GHSA-4j54-mxf6-wxx2
OS Command Injection in pomelo-monitor
Details
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/pomelo-monitor
Introduced in:
0No fixed version published yet for pomelo-monitor (npm). Pin to a known-safe version or switch to an alternative.