CVE-2021-27185

https://notcve.org/view.php?id=CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec. El paquete samba-client versiones anteriores a 4.0.0 para Node.js, permite una inyección de comandos debido al uso del archivo process.exec • https://advisory.checkmarx.net/advisory/CX-2021-4302 https://github.com/eflexsystems/node-samba-client/commit/5bc3bbad9b8d02243bc861a11ec73f788fbb1235 https://github.com/eflexsystems/node-samba-client/releases/tag/4.0.0 https://security.netapp.com/advisory/ntap-20210319-0002 https://www.npmjs.com/package/samba-client • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •