p4 vulnerable to Command Injection due to improper input sanitization

심각 9.8CVE-2022-25171 · GHSA-jfm8-hwhg-r6gg · Published 20/12/2022 · updated 17/06/2026

요약

Package	Affected versions	Patched versions
p4 p4_project	`< 0.0.7`	`0.0.7`
p4 npm	`< 0.0.7`	`0.0.7`

The package p4 before 0.0.7 is vulnerable to Command Injection via the run() function due to improper input sanitization

NVD description

The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization

Running one of these products? Scan your site to see whether it exposes a vulnerable version.