CVE-2022-25923: Exec-Local-Bin Project Exec-Local-Bin

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to improper user-input sanitization.

Affected products

• Exec-Local-Bin Project Exec-Local-Bin: before 1.2.0 (fixed in 1.2.0)

Published 2023-01-06. Last modified 2026-06-17.