Npm-lockfile Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Npm-lockfile Project records in CISA KEV

No Npm-lockfile Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2022-00748 CVE-2022-0841 · GHSA-cr6m-62pq-hmqh

MEDIUM 47

OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02513 Published 2022-03-03 Fixed in 2.0.5 CWE-78