2 matches found
GHSA-6HR9-4692-FCH9 Withdrawn Advisory: OS Command Injection in effect
Withdrawn Advisory This advisory has been withdrawn because the npm package effect, for which alerts were issued, does not correspond with https://github.com/Javascipt/effect, the repository with the vulnerable code. https://github.com/Javascipt/effect is not in any supported ecosystem...
Command injection
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...