Skip to content
Threat Feed
Subscribe

Product

Easy-Pdf-Merge (0.1.0-0.2.6)

1 brief RSS
high advisory

OS Command Injection in easy-pdf-merge

The easy-pdf-merge package (versions 0.1.0 through 0.2.6) contains an OS command injection vulnerability via unsanitized input to child_process.exec(), allowing arbitrary code execution.

easy-pdf-merge command-injection nodejs software-vulnerability
1t 1c