CRITICAL 9.8
GHSA-h33p-5j96-w8qh
OS Command Injection in gulkp-styledocco
상세
gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument `options` of the exports function in `index.js` can be controlled by users without any sanitization.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
npm / gulp-styledocco
최초 영향 버전:
0 No fixed version published yet for gulp-styledocco (npm). Pin to a known-safe version or switch to an alternative.