CVE-2021-29300: Ronomon Opened

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input.

Affected products

• Ronomon Opened: before 1.5.2 (fixed in 1.5.2)

Published 2021-05-24. Last modified 2026-06-17.