VULNERABILITY INTELLIGENCE

CVE-2019-10783

CVSS score9.8 CRITICAL
EPSS probability2.64%
CISA KEVNot currently listed
Published2020-01-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.

Weakness classification

  • nvd@nist.gov: CWE-78

Primary references