Lucene search

K
osvGoogleOSV:GHSA-M647-5WF9-3JP3
HistoryMay 07, 2021 - 4:16 p.m.

OS Command Injection in closure-compiler-stream

2021-05-0716:16:06
Google
osv.dev
11

9.6 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.9%

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument options of the exports function in index.js can be controlled by users without any sanitization.

CPENameOperatorVersion
closure-compiler-streamle0.1.15

9.6 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.9%

Related for OSV:GHSA-M647-5WF9-3JP3