@acrontum/filesystem-template vulnerable to Command Injection due to fetchRepo API missing sanitization

Main / @acrontum/filesystem-template vulnerable to Command Injection due to fetchRepo API missing sanitization

Discription

The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.Read More

References

Back to Main

Subscribe for the latest news: