Description
All versions of package launchpad are vulnerable to Command Injection via stop.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 0.7.5
References
Could your website be exposed too?
SmartScanner can check your website for Command injection in launchpad and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Command injection in github-todos - CVE-2021-44684
- json-logic-js Command Injection vulnerability - CVE-2021-4329
- Command Injection in lodash - CVE-2021-23337
- Command Injection in lodash - lodash-template - CVE-2021-23337
You might also like:
See something that needs correcting? Let us knowUpdated January 27, 2023


