Headline
GHSA-2275-rpf5-xv8h: is-http2 vulnerable to Command Injection
All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function.
is-http2 vulnerable to Command Injection
High severity GitHub Reviewed Published Feb 1, 2023 to the GitHub Advisory Database • Updated Feb 2, 2023
Related news
CVE-2022-25906: Snyk Vulnerability Database | Snyk
All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function.