CRITICAL9.8
GHSA-6xv6-jpvw-cx6q
Command injection in bestzip
Quick fix
GHSA-6xv6-jpvw-cx6q — bestzip: upgrade to the fixed version with the command below.
npm install bestzip@2.1.7Details
The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.
Are you affected?
Enter the version of the package you're using.