window-control is an npm package that provides tools to manage window focus. Versions before 1.4.5 are vulnerable to Command Injection via the sendKeys
function due to improper input sanitization.
{ "nvd_published_at": "2023-01-04T18:15:00Z", "severity": "HIGH", "github_reviewed_at": "2023-01-06T21:39:16Z", "github_reviewed": true, "cwe_ids": [ "CWE-77" ] }