VULNERABILITY INTELLIGENCE

CVE-2022-25926

CVSS score7.8 HIGH

EPSS probability1.16%

CISA KEVNot currently listed

Published2023-01-04

Last modified2026-06-17

Description

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization.