@bigab/gulp-testee (>=0.0.1 <=0.0.2), books-fe-polymer-dev-sample (=1.0.0) +13 more potentially affected by CVE-2021-23330 via launchpad (>=0.2.1 <=0.7.5)

launchpad NPM version =0.2.1, =0.0.1, =0.3.1, =0.0.1, =0.0.1, =1.0.1, =0.2.0, =0.0.1, =0.0.5, =2.0.15, =1.0.1, =2.0.3, =3.4.2 Source cves: CVE-2021-23330 Source advisory: OSV:GHSA-7H8X-WMQ2-7MFF...

CVE-2021-23330

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-23330

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-23330 Command Injection

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-23330

CVE-2021-23330 affects the npm package launchpad . All versions are vulnerable to a Command Injection via the stop function, caused by an insecure use of exec(command) in stop. Documented evidence from multiple sources confirms this vulnerability and its impact. The SNYK entry explicitly states t...

@bigab/gulp-testee (>=0.0.1 <=0.0.2), books-fe-polymer-dev-sample (=1.0.0) +13 more potentially affected by CVE-2021-23330 via launchpad (>=0.2.1 <=0.7.5)

launchpad NPM version =0.2.1, =0.0.1, =0.3.1, =0.0.1, =0.0.1, =1.0.1, =0.2.0, =0.0.1, =0.0.5, =2.0.15, =1.0.1, =2.0.3, =3.4.2 Source cves: CVE-2021-23330 Source advisory: SNYK:JS-LAUNCHPAD-1044065...