HIGH
GHSA-m5ch-gx8g-rg73
Remote Code Execution in pomelo-monitor
Details
All versions of `pomelo-monitor` are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution.
## Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/pomelo-monitor
Introduced in:
0.0.0No fixed version published yet for pomelo-monitor (npm). Pin to a known-safe version or switch to an alternative.