CVE-2020-28443
This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.
9.8CVSS
9.6AI Score
0.003EPSS