Homepage

Command Injection The advisory has been revoked - it doesn't affect any version of package shelljs  (opens in a new tab)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Command Injection vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDnpm:shelljs:20140723
  • published13 Feb 2017
  • disclosed22 Jul 2014
  • creditChris Corbyn
Report a new vulnerability Found a mistake?

Introduced: 22 Jul 2014

CVE NOT AVAILABLE CWE-77  (opens in a new tab)

Overview

After discussions with the maintainer, and added safety warnings to the package for users- this was deemed not a vulnerability.