CRITICAL9.8
GHSA-m647-5wf9-3jp3
OS Command Injection in closure-compiler-stream
Details
closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument `options` of the exports function in `index.js` can be controlled by users without any sanitization.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/closure-compiler-stream
Introduced in:
0No fixed version published yet for closure-compiler-stream (npm). Pin to a known-safe version or switch to an alternative.