CVE-2021-29369: Gnuplot Project Gnuplot

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.

Affected products

• Gnuplot Project Gnuplot: before 0.1.0 (fixed in 0.1.0)

Published 2021-05-03. Last modified 2026-06-17.