Information Exposure

@nestjs/common, is vulnerable to information exposure. The vulnerability exists due to a lack of client request sanitization in the streamable-file.ts file, allowing an attacker to read sensitive information in the system through the DVI element...

Command Injection

cycle-import-check is vulnerable to command injection. The vulnerability exists due to the writeFileToTmpDirAndOpenIt function in file.ts improperly sanitizating user-input which allows an attacker to inject and execute arbitrary commands...