Cycle-Import-Check Security Vulnerabilities - February

cve

CVE-2022-24377

The package cycle-import-check before 1.3.2 are vulnerable to Command Injection via the writeFileToTmpDirAndOpenIt function due to improper user-input sanitization.

9.8CVSS

9.7AI Score

0.002EPSS

2022-12-15 03:44 AM