description: A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.
problem types: Code Injection (CWE-94)
affected:
{
product: node-df
vendor: n/a
versions:
status: affected, version: Not fixed
}