Vulnerability Details CVE-2021-29300
The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.382
EPSS Ranking 97.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2021-29300
-
cpe:2.3:a:ronomon:opened:-
-
cpe:2.3:a:ronomon:opened:1.0.1
-
cpe:2.3:a:ronomon:opened:1.0.2
-
cpe:2.3:a:ronomon:opened:1.1.0
-
cpe:2.3:a:ronomon:opened:1.2.0
-
cpe:2.3:a:ronomon:opened:1.3.0
-
cpe:2.3:a:ronomon:opened:1.3.1
-
cpe:2.3:a:ronomon:opened:1.4.0
-
cpe:2.3:a:ronomon:opened:1.4.1
-
cpe:2.3:a:ronomon:opened:1.5.0
-
cpe:2.3:a:ronomon:opened:1.5.1