Description
network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync()" argument.
Remediation
References
https://snyk.io/vuln/SNYK-JS-NETWORKMANAGER-544035
Related Vulnerabilities
CVE-2020-35210 Vulnerability in maven package io.atomix:atomix
CVE-2022-31367 Vulnerability in npm package strapi-plugin-content-manager
CVE-2021-35065 Vulnerability in npm package glob-parent
CVE-2023-3815 Vulnerability in maven package com.ruoyi:ruoyi
CVE-2023-40349 Vulnerability in maven package org.jenkins-ci.plugins:gogs-webhook