p4 vulnerable to Command Injection due to improper input sanitization

CRITICO 9.8CVE-2022-25171 · GHSA-jfm8-hwhg-r6gg · Published 20/12/2022 · updated 17/06/2026

In breve

CVE-2022-25171 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda p4 (p4 project), p4.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.6% delle vulnerabilità.
Correzione: aggiornare a 0.0.7 o successiva.

Package	Affected versions	Patched versions
p4 p4_project	`< 0.0.7`	`0.0.7`
p4 npm	`< 0.0.7`	`0.0.7`

The package p4 before 0.0.7 is vulnerable to Command Injection via the run() function due to improper input sanitization

NVD description

The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization

Running one of these products? Scan your site to see whether it exposes a vulnerable version.