CVE-2020-7601
OS Command Injection in gulp-scss-lint
Résumé
OS Command Injection in gulp-scss-lint
Description d'origine
La description telle que publiée par la source (souvent en anglais).
gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
gulp-scss-lint
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.0.0"}]}]
Références
- advisory nvd.nist.gov
- web snyk.io