CVE-2020-7601
OS Command Injection in gulp-scss-lint
Summary
OS Command Injection in gulp-scss-lint
Original description
The description as published by the source.
gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
gulp-scss-lint
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.0.0"}]}]
References
- advisory nvd.nist.gov
- web snyk.io