Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:19 p.m.3 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS8.2AI score0.002EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2021/09/02 5:8 p.m.29 views

Command injection in @diez/generation

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS4.2AI score0.002EPSS
Exploits1References4Affected Software1
vulnersOsv
vulnersOsv
added 2021/09/02 5:8 p.m.1 views

@diez/extractors (>=10.0.0 <=10.6.0-beta.1), @diez/sources (>=10.0.0-alpha.0 <=10.0.0-beta.4) +1 more potentially affected by CVE-2021-32830 via @diez/generation (=10.6.0)

@diez/generation NPM version =10.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on @diez/generation and may be impacted: - @diez/extractors =10.0.0, =10.0.0-alpha.0, =10.0.0-beta.4 - diez =10.0.0-alpha.0 Source cves: CVE-2021-32830 Source advisory:...

7CVSS7AI score0.002EPSS
Exploits1
OSV
OSV
added 2021/09/02 5:8 p.m.0 views

GHSA-8C3F-X5F9-6H62 Command injection in @diez/generation

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

3.9CVSS7.5AI score0.002EPSS
Exploits1References4
NVD
NVD
added 2021/08/17 6:15 p.m.7 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS0.002EPSS
Exploits1References3
OSV
OSV
added 2021/08/17 6:15 p.m.1 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS7.5AI score0.002EPSS
Exploits1References3
Rows per page
Query Builder