Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2021-34078

29
FAUCET Score

CVE-2021-34078 is an OS command injection vulnerability affecting adp lifion_verify_dependencies through version 1.1.0, allowing attackers to execute arbitrary commands via a crafted dependency name in a project's package.json file. This vulnerability has a high severity CVSS score of 8.8, indicating a critical risk with high impact on confidentiality, integrity, and availability, requiring user interaction for exploitation. While no active exploitation, public exploits, or significant community discussion have been observed, its high FAUCET Risk Score of 74/100 suggests a notable potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.2.0CPE matchmatch criteria
cpe:2.3:a:adp:lifion-verifiy-dependencies:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.46%
Probability of exploitation in next 30 days
EPSS Percentile
82.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0246 is in the 82nd percentile among its peer group of 14,848 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
npmpatch availablevia ghsa
Product: lifion-verify-depsFixed in: 1.2.0

Vendor Advisories (1)

npmGHSA-rphm-c8gw-3r38high

OS Command Injection in lifion-verify-deps

Jun 3, 2022

References

advisory.checkmarx.net / advisory/CX-2021-4785
ExploitPatchThird Party Advisory
github.com / lifion/lifion-verify-deps/commit/be1133d5b78e3caa0004fa60207013dca4e1bf38
PatchThird Party Advisory