Lucene search
+L

7 matches found

OSV
OSV
added 2022/08/06 12:0 a.m.57 views

GHSA-M2FC-9H5M-29CM @acrontum/filesystem-template vulnerable to Command Injection due to fetchRepo API missing sanitization

The package @acrontum/filesystem-template before 0.0.2 is vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input...

9.8CVSS9.7AI score0.24865EPSS
SaveExploits1References6
Rows per page
Query Builder