CVE-2021-34078 | BDVDB-2026-177187 Detail

Description#

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://advisory.checkmarx.net/advisory/CX-2021-4785
https://github.com/lifion/lifion-verify-deps/commit/be1133d5b78e3caa0004fa60207013dca4e1bf38

Exploit#

No public exploit known

History#

Version 12022-06-01Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.