Command Injection in nuance-gulp-build-common

All versions of package nuance-gulp-build-common are vulnerable to Command Injection via the index.js file. PoC: js var a = require"nuance-gulp-build-common" a.run"touch JHU"...

Arbitrary Command Execution

nuance-gulp-build-common is vulnerable to arbitrary command execution. The run function allows an attacker to execute arbitrary commands on the host OS...

PT-2021-11529

Name of the Vulnerable Software and Affected Versions: nuance-gulp-build-common affected versions not specified Description: The issue concerns Command Injection via the index.js file in the nuance-gulp-build-common package. A proof of concept PoC demonstrates the vulnerability by requiring the...