CVE-2020-7631

Diskusage-ng (npm package) vulnerability CVE-2020-7631: versions up to 0.2.4 are vulnerable to Command Injection via the path argument due to unsanitized input. Impact: arbitrary commands may be executed with the affected code path. Root cause: user-controlled path parameter not sanitized before ...