Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

huntr.dev - Command Injection Fix #45

Merged
merged 4 commits into from
May 1, 2020
Merged

Conversation

huntr-helper
Copy link
Contributor

@huntr-helper huntr-helper commented Apr 17, 2020

https://huntr.dev/app/users/mufeedvh has fixed a security vulnerability (Command Injection) 🔨. mufeedvh has been awarded $25 for fixing the vulnerability through the huntr bug bounty program 💵. Think you could fix a vulnerability like this? Get involved at https://huntr.dev/!

Q | A
Version Affected | ALL
Bug Fix | YES
Original Pull Request | 418sec#1

Bounty URL: https://huntr.dev/bounties/1-npm-clamscan

index.js Outdated Show resolved Hide resolved
Fixing requested change to index value of version_cmds_exec.

Co-Authored-By: Kyle Farris <kylefarris@gmail.com>
@JamieSlome
Copy link
Contributor

@kylefarris - requested changes have been made! 🍰

@SaltwaterC
Copy link
Contributor

SaltwaterC commented Apr 30, 2020

@kylefarris out of curiosity, has this originated from the sockets branch since this issue has been patched in the old master of 0.8.2 like donkey's years ago?

@kylefarris
Copy link
Owner

@SaltwaterC, it is quite odd. I rebased the sockets branch several times during development and then once more before merging into master. Maybe I didn't handle a conflict properly?

@kylefarris kylefarris merged commit 5f557c9 into kylefarris:master May 1, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants