CVE-2022-21129

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. **Note:** In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies.

• CWE-78
• CWE-77

• https://github.com/paypal/nemo-appium/blob/master/index.js%23L27Broken Link
• https://github.com/paypal/nemo-appium/commit/aa271d36dd5c81baae3c43aa2616c84f0ee4195fPatch, Third Party Advisory
• https://security.snyk.io/vuln/SNYK-JS-NEMOAPPIUM-3183747Exploit, Third Party Advisory
• https://github.com/paypal/nemo-appium/blob/master/index.js%23L27Broken Link
• https://github.com/paypal/nemo-appium/commit/aa271d36dd5c81baae3c43aa2616c84f0ee4195fPatch, Third Party Advisory
• https://security.snyk.io/vuln/SNYK-JS-NEMOAPPIUM-3183747Exploit, Third Party Advisory

Published

Jan 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21123Incomplete cleanup of multi-core shared buffers for some Int…5.5
• CVE-2022-21124Out-of-bounds write vulnerability in CX-Programmer v9.76.1 a…7.8
• CVE-2022-21125Incomplete cleanup of microarchitectural fill buffers on som…5.5
• CVE-2022-21126The package com.github.samtools:htsjdk before 3.0.1 are vuln…7.8
• CVE-2022-21127Incomplete cleanup in specific special register read operati…5.5
• CVE-2022-21128Insufficient control flow management in the Intel(R) Advisor…7.8
• CVE-2022-2113Cross-site Scripting (XSS) - Stored in GitHub repository inv…5.4
• CVE-2022-21130Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-21131Improper access control for some Intel(R) Xeon(R) Processors…5.5
• CVE-2022-21132Directory traversal vulnerability in pfSense-pkg-WireGuard p…6.5
• CVE-2022-21133Out-of-bounds read in the Intel(R) Trace Analyzer and Collec…5.5
• CVE-2022-21134A firmware update vulnerability exists in the "update&q…7.5