cycle-import-check 操作系统命令注入漏洞

cycle-import-check is a JS module cycle dependency checking tool by Theo Sun's personal developer. Versions of cycle-import-check prior to 1.3.2 suffer from an operating system command injection vulnerability that stems from incorrect user input cleanup and is susceptible to command injection via...