p4 vulnerable to Command Injection due to improper input sanitization

CRÍTICO 9.8CVE-2022-25171 · GHSA-jfm8-hwhg-r6gg · Published 20/12/2022 · updated 17/06/2026

Em resumo

CVE-2022-25171 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta p4 (p4 project), p4.
Chance de exploração nos próximos 30 dias (EPSS): 2.5%, maior que 84.6% das vulnerabilidades.
Correção: atualize para 0.0.7 ou posterior.

Package	Affected versions	Patched versions
p4 p4_project	`< 0.0.7`	`0.0.7`
p4 npm	`< 0.0.7`	`0.0.7`

The package p4 before 0.0.7 is vulnerable to Command Injection via the run() function due to improper input sanitization

NVD description

The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization

Running one of these products? Scan your site to see whether it exposes a vulnerable version.