← Database

CVE-2022-25908

HIGH CVSS: 7.4 Published: 2023-01-26 Modified: 2026-06-17

Description

All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.

Affected Platforms

Create-Choo-Electron Project Create-Choo-Electron

Weakness Type

CWE-78, NVD-CWE-Other, CWE-77

References