Vulnerabilities
9.3 CVSS: Whisper-node v1.1.1 OS Command Injection Grants Node.js Privileges
A critical OS command injection vulnerability in Whisper-node versions up to 1.1.1 lets attackers run arbitrary commands with Node.js process privileges.
Node.js
Everything InfoSec Ledger has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
9.3 CVSS: video-stitch <2.0.0-beta.1 Critical Shell Injection via Filenames in Node.js Apps
A critical flaw in video-stitch allows attackers to execute operating system commands via manipulated filenames in Node.js applications.