PT-2020-19670

Name of the Vulnerable Software and Affected Versions heroku-addonpool versions 0.1.15 and earlier Description The issue concerns a Command Injection problem. Specifically, the second parameter of the exported function HerokuAddonPoolid, app, opt can be controlled by users without any sanitizatio...