CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

CVE-2021-32830

The CVE-2021-32830 entry concerns the @diez/generation npm package, where the locateFont method contains a command injection vulnerability. The vulnerability can lead to remote code execution if untrusted input is passed to the vulnerable method. All versions are reported as vulnerable in the CVE...