| Package | Affected versions | Patched versions |
|---|---|---|
| node-macaddress | < 0.2.9 | 0.2.9 |
| macaddress | < 0.2.9 | 0.2.9 |
All versions of macaddress are vulnerable to command injection. For this vulnerability to be exploited an attacker needs to control the iface argument to the one method.
Update to version 0.2.9 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free