Merge pull request #518 from 418sec/6-npm-systeminformation

Security Fix for Improper Input Validation
sebhildebrandt · Apr 8, 2021 · 45c08f1 · 45c08f1
2 parents 87e7b0c + 434fb0e
commit 45c08f1
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/osinfo.js b/lib/osinfo.js
@@ -485,6 +485,10 @@ function versions(apps, callback) {
         apps = '*';
       } else {
         apps = apps || '*';
+        if (typeof apps !== 'string') {
+          if (callback) { callback({}); }
+          return resolve({});
+        }
       }
       const appsObj = checkVersionParam(apps);
       let totalFunctions = appsObj.counter;