Skip to content
This repository has been archived by the owner on Apr 25, 2019. It is now read-only.

[SECURITY] command-exists package <1.2.4 vulnerability #75

Open
impactmass opened this issue Jul 25, 2018 · 0 comments
Open

[SECURITY] command-exists package <1.2.4 vulnerability #75

impactmass opened this issue Jul 25, 2018 · 0 comments

Comments

@impactmass
Copy link

Issue Description

Got this when installing the CLI on a new environment:

WARN notice [SECURITY] command-exists has the following vulnerability: 1 critical. Go here for more details: https://nodesecurity.io/advisories?search=command-exists&version=1.2.2

Snyk also reports it here https://snyk.io/vuln/npm:command-exists

Steps to Reproduce

npm install -g reaction-cli

Possible Solution

Latest version of the package may have been fixed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant