Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-552j-pv39-f3jf: OS Command injection in ssl-utils

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest() and the createCert() functions.

ghsa
#vulnerability#nodejs#js#git#ssl

OS Command injection in ssl-utils

High severity GitHub Reviewed Published Jun 3, 2022 • Updated Jun 3, 2022

Related news

CVE-2021-34080: Checkmarx Advisory

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest() and the createCert() functions.