WS-2018-0008

mobile-icon-resizer 0.2.0--0.4.2 is vulnerable due to code execution vulnerability...

Arbitrary Code Injection in mobile-icon-resizer

mobile-icon-resizer resizes large images for use as icons for iOS and Android. mobile-icon-resizer has a code execution vulnerability in versions before 0.4.3. mobile-icon-resizer takes an options object as an argument to define the resulting icons as such: var options = config: './config.js'...

PT-2019-20060

Name of the Vulnerable Software and Affected Versions mobile-icon-resizer versions prior to 0.4.3 Description The issue concerns a code execution vulnerability. It allows dynamic JavaScript payloads to be executed due to the ratio and baseRatio parameters being passed directly to eval. This...