CVE-2020-7782
This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package.
9.8CVSS
9.5AI Score
0.025EPSS