CVE-2020-4066 Command Injection in Limdu trainBatch function

In Limdu before 0.95, the trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This has been patched in 0.95...

CVE-2020-4066

Limdu prior to version 0.95 contains a command injection vulnerability in the trainBatch function. This affects users of Limdu’ s Node.js machine learning framework that rely on shell-executed components (e.g., SVM-related tools). The issue can enable an attacker to execute arbitrary OS commands ...

ac-learn (>=1.0.0, <=1.7.0), gladys (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2020-4066 via limdu (>=0.8.0, <=0.9.4)

limdu NPM version =0.8.0, =1.0.0, =3.0.0, =3.6.0 - test-result-normalizer 0.1.4 Source cves: CVE-2020-4066 Source advisory: OSV:GHSA-77QV-GH6F-PGH4...