{"id":"CVE-2021-23330","aliases":["GHSA-7h8x-wmq2-7mff","SNYK-JS-LAUNCHPAD-1044065"],"url":"https://o3.security/vulnerability/CVE-2021-23330","summary":"Command injection in launchpad","details":"All versions of package launchpad are vulnerable to Command Injection via stop.","published":"2021-02-01T15:15:13.450Z","modified":"2026-07-09T12:33:06.489211Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"launchpad","fixedVersion":null}],"fix":{"url":"https://github.com/bitovi/launchpad/pull/124","label":"bitovi/launchpad#124"},"references":[{"type":"ADVISORY","url":"https://github.com/bitovi/launchpad/issues/123%23issuecomment-732188118"},{"type":"ADVISORY","url":"https://snyk.io/vuln/SNYK-JS-LAUNCHPAD-1044065"},{"type":"FIX","url":"https://github.com/bitovi/launchpad/pull/124"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T12:33:06.489211Z"}}