๐ gnuplot Package up to 0.9.x on Node.js os command injection [CVE-2021-29369]
๐ก Newskategorie: Sicherheitslรผcken
๐ Quelle: vuldb.com
A vulnerability was found in gnuplot Package up to 0.9.x on Node.js (JavaScript Library). It has been classified as critical. This affects an unknown code block. Upgrading to version 0.1.0 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version. ...