critical9.8
CVE-2022-25962
Command injection in vagrant.js
Impact
All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | vagrant.js | <= 0.0.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vagrant.Js Project | Vagrant.Js | All versions |