CVE-2022-25926
Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization.
CVSS 3.1 · 7.4 High
EPSS 1.1%
KEV · Not listed
Vendors
Products