CRITICAL 9.8

GHSA-gp2j-mg4w-2rh5

chrome-launcher subject to OS Command Injection

상세

chrome-launcher prior to 0.13.2 is subject to OS Command Injection via the `$HOME` environment variable in Linux operating systems. This issue is patched in version 0.13.2.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

npm / chrome-launcher

최초 영향 버전: 0 수정 버전: 0.13.2

수정 npm install chrome-launcher@0.13.2

참고

https://nvd.nist.gov/vuln/detail/CVE-2020-7645 [ADVISORY]
https://github.com/GoogleChrome/chrome-launcher/pull/197 [WEB]
https://github.com/GoogleChrome/chrome-launcher [PACKAGE]
http://snyk.io/vuln/SNYK-JS-CHROMELAUNCHER-537575 [WEB]