{"items":[{"id":"CVE-2018-3772","published":"2018-07-30T18:00:00.000Z","updated":"2024-09-17T02:26:55.080Z","title":"Concatenating unsanitized user input in the `whereis` npm module < 0.4.1 allowed an attacker to execute arbitrary commands. The `whereis` module is deprecated…","severity":"CRITICAL","score":9.8,"vendor":"https://github.com/vvo","product":"whereis","kev":false,"epss":0.0276,"kevAdded":null}]}