CVE-2022-25926 Information

Description

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function due to improper input sanitization.

Reference

https://github.com/bruno-robert/window-control/commit/075c854534a749d887655a906759f5a7eee95173 https://github.com/bruno-robert/window-control/releases/tag/v1.4.5 https://security.snyk.io/vuln/SNYK-JS-WINDOWCONTROL-3186345