Command Injection

Overview

All versions of package ts-process-promises are affected by a command injection vulnerability. The injection point is located in line 45 in main entry of package in lib/process-promises.js.

Recommendation

Since there is currently no fix version, discontinue use of the ts-process-promises package.

References

• GitHub Advisory
• Snyk Advisory