Lucene search
+L

1 matches found

OSV
OSV
added 2022/06/01 7:58 p.m.12 views

GHSA-GP95-PPV5-3JC5 sharp vulnerable to Command Injection in post-installation over build environment

There's a possible vulnerability in logic that is run only at npm install time when installing versions of sharp prior to the latest v0.30.5. This is not part of any runtime code, does not affect Windows users at all, and is unlikely to affect anyone that already cares about the security of their...

6.5CVSS6AI score0.0037EPSS
SaveExploits0References5
Rows per page
Query Builder