Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization.
https://github.com/bruno-robert/window-control/commit/075c854534a749d887655a906759f5a7eee95173
https://github.com/bruno-robert/window-control/releases/tag/v1.4.5
https://security.snyk.io/vuln/SNYK-JS-WINDOWCONTROL-3186345
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This
Description Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file
Description Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyzer detail view component),