gramaddict@1.2.2 vulnerabilities

Human-like Instagram bot powered by UIAutomator2

  • latest version

    3.2.12

  • latest non vulnerable version

  • first published

    4 years ago

  • latest version published

    1 years ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the gramaddict package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Arbitrary Command Execution

    GramAddict is a Human-like Instagram bot powered by UIAutomator2

    Affected versions of this package are vulnerable to Arbitrary Command Execution due to the use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.

    How to fix Arbitrary Command Execution?

    Upgrade GramAddict to version 1.2.4 or higher.

    [,1.2.4)