aaptjs remote code execution vulnerability (CNVD-2021-84832)

aaptjs is a node wrapper for aapt. aaptjs version 1.3.1 has a remote code execution vulnerability in the singleCrunch function. An attacker can exploit this vulnerability to execute arbitrary code via the filePath parameter...