npm Alert
3115Warning Date
Severity Level
Warning Number
Target Sector
6 January, 2022
● Critical
2022-4169
All
npm has released security update to address a vulnerability in the following product:
- node-windows <= 1.0.0-beta.5
Attacker could exploit this vulnerability by doing the following:
- Command injection
The CERT team encourages users to review npm security advisory: