Command Injection

Overview @syncfusion/ej2-base is an A common package of Essential JS 2 base libraries, methods and class definitions Affected versions of this package are vulnerable to Command Injection via the use of childprocess.exec function which uses the package name from package.json without escaping befor...