CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

@diez/extractors (>=10.0.0-beta.5, <=10.6.0), @diez/sources (>=10.0.0-alpha.0, <=10.0.0-beta.4) +1 more potentially affected by CVE-2021-32830 via @diez/generation (10.6.0)

@diez/generation NPM version 10.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on @diez/generation and may be impacted: - @diez/extractors =10.0.0-beta.5, =10.0.0-alpha.0, =10.0.0-beta.4 - diez 10.0.0-alpha.0 Source cves: CVE-2021-32830 Source...

@diez/extractors (>=10.0.0-beta.5, <=10.6.0), @diez/sources (>=10.0.0-alpha.0, <=10.0.0-beta.4) +1 more potentially affected by CVE-2021-32830 via @diez/generation (10.6.0)

@diez/generation NPM version 10.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on @diez/generation and may be impacted: - @diez/extractors =10.0.0-beta.5, =10.0.0-alpha.0, =10.0.0-beta.4 - diez 10.0.0-alpha.0 Source cves: CVE-2021-32830 Source...

Command injection in @diez/generation

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

GHSA-8C3F-X5F9-6H62 Command injection in @diez/generation

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

PT-2021-19962

Name of the Vulnerable Software and Affected Versions @diez/generation affected versions not specified Description The @diez/generation npm package has a command injection vulnerability in its locateFont method. This issue may lead to remote code execution if a client of the library calls the...

CVE-2021-32830: Improper Neutralization of Special Elements used in an OS Command

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...