https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 06:27:28 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-38669 cnvd-2021-38669 https://cve.radiocsirt.org/vuln/cnvd-2021-38669 https://cve.radiocsirt.org/vuln/euvd-2026-70952 EUVD-2026-70952 https://cve.radiocsirt.org/vuln/euvd-2026-70952 https://cve.radiocsirt.org/vuln/fkie_cve-2018-21268 <p>The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.</p> <p>The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-21268 https://cve.radiocsirt.org/vuln/ghsa-8j9v-qhp4-wv55 <p><strong>Affected:</strong> npm: traceroute</p> <p>The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the `Child.exec()` method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.</p> <p><strong>Affected:</strong> npm: traceroute</p> <p>The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the `Child.exec()` method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.</p> https://cve.radiocsirt.org/vuln/ghsa-8j9v-qhp4-wv55 https://cve.radiocsirt.org/vuln/gsd-2018-21268 gsd-2018-21268 https://cve.radiocsirt.org/vuln/gsd-2018-21268