CVE-2022-25350

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization.

Date published : 2023-01-24

https://github.com/olindata/node-puppet-facter/blob/f34bcc754325d71bb3b1b534804e53d6170f15f5/index.js%23L10

https://security.snyk.io/vuln/SNYK-JS-PUPPETFACTER-3175616