7.4
Élevée
CVE-2022-25926 Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due…
Description
Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| window-control 1.4 | premières → < 1.4.5 | 1.4.5 |