CPE

Cpe:2.3:a:bestzip_project:bestzip:2.2.6:::::node.js::

1 brief RSS

Argument Injection in bestzip nativeZip Function

The bestzip package version 2.2.6 and 3.0.2 is vulnerable to argument injection in the nativeZip function, allowing unauthenticated attackers to execute arbitrary commands via malicious input.

bestzip vulnerability remote-code-execution nodejs software-supply-chain

1t 1c 2d ago

Cpe:2.3:a:bestzip_project:bestzip:2.2.6:*:*:*:*:node.js:*:*

Argument Injection in bestzip nativeZip Function

Cpe:2.3:a:bestzip_project:bestzip:2.2.6:::::node.js::