VDB
Sign up
HIGH

GHSA-gc94-6w89-hpqr

Command Injection in fs-path

Quick fix

GHSA-gc94-6w89-hpqr — fs-path: upgrade to the fixed version with the command below.

npm install fs-path@0.0.25

Details

All versions of `fs-path` are vulnerable to command injection is unsanitized user input is passed in.

## Recommendation

No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/fs-path
Introduced in: 0Fixed in: 0.0.25
Fixnpm install fs-path@0.0.25

References