7.4
High
CVE-2022-25926 Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due…
Description
Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| window-control 1.4 | earliest → < 1.4.5 | 1.4.5 |