Effect Command Injection Vulnerability

effect is a node program package that allows you to add effects to your images. A command injection vulnerability exists in effect 1.0.4 and earlier. The vulnerability can be exploited to execute arbitrary commands via the options parameter...

Command Injection

Amendment This was deemed not a vulnerability. Overview effect is a node package that allows you to add effects on images. Affected versions of this package are vulnerable to Command Injection. The argument options can be controlled by users without any sanitization. PoC js var Root=...