CVE-2021-34078

Published: Jun 1, 2022

Modified: Aug 4, 2024

PUBLISHED

Description

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://advisory.checkmarx.net/advisory/CX-2021-4785

x_refsource_MISC

https://github.com/lifion/lifion-verify-deps/commit/be1133d5b78e3caa0004fa60207013dca4e1bf38

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-34078

Description

Affected Products

References