Skip to content

Security Notice & Bug Bounty - Command Injection - huntr.dev #19

@huntr-helper

Description

@huntr-helper

Overview

windows-shortcuts is a Create, edit, and query Windows shortcuts (.lnk files)

This package is vulnerable to Command Injection. It is possible to run arbitrary code during a Windows shortcut creation.

Bug Bounty

We have opened up a bounty for this issue on our bug bounty platform. Want to solve this vulnerability and get rewarded 💰? Go to https://huntr.dev/

We will submit a pull request directly to your repository with the fix as soon as possible. Want to learn more? Go to https://github.com/418sec/huntr 📚

Automatically generated by @huntr-helper...

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions