Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
added 2022/08/06 12:0 a.m.28 views

@acrontum/filesystem-template vulnerable to Command Injection due to fetchRepo API missing sanitization

The package @acrontum/filesystem-template before 0.0.2 is vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input...

9.8CVSS2.1AI score0.24865EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder