Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Ronomon Component: Opened Clear all filters
TI-2021-10088 CVE-2021-29300 · GHSA-fg5w-w99f-rj6w

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection…

Priority MEDIUM 49

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04508 Published 2021-05-24 Fixed in 1.5.2 CWE-78