VDB
Sign up
HIGH8.8

GHSA-qr28-p3wr-mxq3

ngrok is Vulnerable to Command Injection

Details

ngrok v4.3.3 and 5.0.0-beta.2 are vulnerable to Command Injection.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/ngrok

No fixed version published yet for ngrok (npm). Pin to a known-safe version or switch to an alternative.

npm/ngrok

No fixed version published yet for ngrok (npm). Pin to a known-safe version or switch to an alternative.

References