com.zaxxer:nuprocess@2.0.4 vulnerabilities
latest version
3.0.0
latest non vulnerable version
first published
11 years ago
latest version published
3 months ago
licenses detected
- [0.9.0,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.zaxxer:nuprocess package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Arbitrary Command Injection due to improper user-input sanitization, allowing attackers to use NUL characters in their strings in order to craft a malicious payload. ** Note: ** Java's ProcessBuilder isn't vulnerable because of a check in ProcessBuilder.start. NuProcess is missing that check. This vulnerability can only be exploited to inject command line arguments on Linux. How to fix Arbitrary Command Injection? Upgrade | [1.2.0,2.0.5) |