CVE-2022-21129: PayPal Nemo-Appium

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. **Note:** In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies.

Affected products

• PayPal Nemo-Appium: before 0.0.9 (fixed in 0.0.9)

Published 2023-01-31. Last modified 2026-06-17.