Arbitrary Command Injection (CVE-2022-21186)

Summary

Arbitrary Command Injection

Original description

The description as published by the source.

The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

References

advisory github.com
advisory nvd.nist.gov
web github.com
web security.snyk.io