CVE-2020-7624

CVE-2020-7624 affects the Node package effect (through version 1.0.4 and earlier). The root cause is that the options argument is passed to a function that invokes shell commands via exec without proper sanitization, enabling OS command injection and arbitrary command execution. Public references...