CVE-2021-27185: Injection Vulnerability

February 10, 2021 (updated April 29, 2022)

The samba-client package for Node.js allows command injection because of the use of process.exec.

References

nvd.nist.gov/vuln/detail/CVE-2021-27185

Code Behaviors & Features

Detect and mitigate CVE-2021-27185 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →