bmoor-cache (>=0.3.0, <=0.6.0), bmoor-comm (>=0.0.1, <=0.6.0) +7 more potentially affected by CVE-2021-23558 via bmoor (>=0.0.5, <=0.9.8)

bmoor NPM version =0.0.5, =0.3.0, =0.0.1, =0.5.0, =0.2.0, =0.1.0, =0.0.4, =0.6.0, =0.6.43 Source cves: CVE-2021-23558 Source advisory: MEND:CVE-2021-23558...

gulp-teddy (>=0.0.1, <=1.6.1), roosevelt (>=0.4.9, <=0.4.33) potentially affected by CVE-2021-23447 via teddy (>=0.2.52, <=0.4.28)

teddy NPM version =0.2.52, =0.0.1, =0.4.9, =0.4.33 Source cves: CVE-2021-23447 Source advisory: OSV:GHSA-5F38-9JW2-6R6H...

gulp-teddy (>=0.0.1, <=1.6.1), roosevelt (>=0.4.9, <=0.4.33) potentially affected by CVE-2021-23447 via teddy (>=0.2.52, <=0.4.28)

teddy NPM version =0.2.52, =0.0.1, =0.4.9, =0.4.33 Source cves: CVE-2021-23447 Source advisory: GHSA-5F38-9JW2-6R6H...

gulp-teddy (>=0.0.1, <=1.6.1), roosevelt (>=0.4.9, <=0.4.33) potentially affected by CVE-2021-23447 via teddy (>=0.2.52, <=0.4.28)

teddy NPM version =0.2.52, =0.0.1, =0.4.9, =0.4.33 Source cves: CVE-2021-23447 Source advisory: MEND:CVE-2021-23447...

gulp-teddy (>=0.0.1, <=1.6.1), roosevelt (>=0.4.9, <=0.4.33) potentially affected by CVE-2021-23447 via teddy (>=0.2.52, <=0.4.28)

teddy NPM version =0.2.52, =0.0.1, =0.4.9, =0.4.33 Source cves: CVE-2021-23447 Source advisory: SNYK:JS-TEDDY-1579557...

gulp-controlled-merge-json (0.2.1) potentially affected by CVE-2020-28268 via controlled-merge (1.1.0)

controlled-merge NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on controlled-merge and may be impacted: - gulp-controlled-merge-json 0.2.1 Source cves: CVE-2020-28268 Source advisory: GHSA-5PG7-V24C-9RP9...

gulp-controlled-merge-json (0.2.1) potentially affected by CVE-2020-28268 via controlled-merge (1.1.0)

controlled-merge NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on controlled-merge and may be impacted: - gulp-controlled-merge-json 0.2.1 Source cves: CVE-2020-28268 Source advisory: OSV:GHSA-5PG7-V24C-9RP9...

Injection in gulp-scss-lint

Overview gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options. Recommendation Avoid using gulp-scss-lint as there is no current safe version of this module...

bootstrap-borders-utilities (1.0.8), gulp-auto-build (>=0.0.1, <=0.0.2) +4 more potentially affected by CVE-2020-7601 via gulp-scss-lint (1.0.0)

gulp-scss-lint NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gulp-scss-lint and may be impacted: - bootstrap-borders-utilities 1.0.8 - gulp-auto-build =0.0.1, =1.0.0, =1.0.3 - test4-by-hanh 1.0.0 - wav-lint 1.0.0 - wavvn-gulp-valida...

OS Command Injection in gulp-scss-lint

gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options...

bootstrap-borders-utilities (1.0.8), gulp-auto-build (>=0.0.1, <=0.0.2) +4 more potentially affected by CVE-2020-7601 via gulp-scss-lint (1.0.0)

gulp-scss-lint NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gulp-scss-lint and may be impacted: - bootstrap-borders-utilities 1.0.8 - gulp-auto-build =0.0.1, =1.0.0, =1.0.3 - test4-by-hanh 1.0.0 - wav-lint 1.0.0 - wavvn-gulp-valida...

GHSA-G4HJ-R7R3-9RWV OS Command Injection in gulp-scss-lint

gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options...

hapi-rest (0.15.1), magnolia-frontend-scripts (>=0.2.0, <=0.3.9) +1 more potentially affected by CVE-2020-7605 via gulp-tape (1.0.0)

gulp-tape NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gulp-tape and may be impacted: - hapi-rest 0.15.1 - magnolia-frontend-scripts =0.2.0, =0.1.5, =0.43.2 Source cves: CVE-2020-7605 Source advisory: GHSA-X67X-98X7-WV26...

hapi-rest (0.15.1), magnolia-frontend-scripts (>=0.2.0, <=0.3.9) +1 more potentially affected by CVE-2020-7605 via gulp-tape (1.0.0)

gulp-tape NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gulp-tape and may be impacted: - hapi-rest 0.15.1 - magnolia-frontend-scripts =0.2.0, =0.1.5, =0.43.2 Source cves: CVE-2020-7605 Source advisory: OSV:GHSA-X67X-98X7-WV26...

GHSA-X67X-98X7-WV26 OS Command Injection in gulp-tape

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of gulp-tape options...

OS Command Injection in gulp-tape

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of gulp-tape options...

GHSA-H33P-5J96-W8QH OS Command Injection in gulkp-styledocco

gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument options of the exports function in index.js can be controlled by users without any sanitization...

OS Command Injection in gulkp-styledocco

gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument options of the exports function in index.js can be controlled by users without any sanitization...

GHSA-8695-FR6H-9FQ8 Command Injection in nuance-gulp-build-common

All versions of package nuance-gulp-build-common are vulnerable to Command Injection via the index.js file. PoC: js var a = require"nuance-gulp-build-common" a.run"touch JHU"...

Command Injection in nuance-gulp-build-common

All versions of package nuance-gulp-build-common are vulnerable to Command Injection via the index.js file. PoC: js var a = require"nuance-gulp-build-common" a.run"touch JHU"...