VDB
Sign up
CRITICAL9.8

GHSA-7vm7-j8p7-h346

Code injection in blamer

Quick fix

GHSA-7vm7-j8p7-h346 — blamer: upgrade to the fixed version with the command below.

npm install blamer@1.0.1

Details

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/blamer
Introduced in: 0Fixed in: 1.0.1
Fixnpm install blamer@1.0.1

References