← Back

Forkhq

forkhq

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Network
network
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-21488
1Forkhq
1Network
Jul 4, 2026
Jan 30, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user input is given to the mac...Show more
Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user input is given to the mac_address_for function of the package, it is possible for the attacker to execute arbitrary commands on the operating system that this package is being run on.Show less