| Package | Affected versions | Patched versions |
|---|---|---|
| node-dns-sync | < 0.2.1 | 0.2.1 |
| dns-sync | ≥ 0.1.3, < 0.2.1 | 0.2.1 |
dns-sync through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free