OS Command Injection

gulp-styledocco is vulnerable to OS Command Injection. The vulnerability exists as the value of options is improperly handled by index.js...

CVE-2019-13959

In Bento4 1.5.1-627, AP4DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186...