CRITICAL9.8
GHSA-x67x-98x7-wv26
OS Command Injection in gulp-tape
Details
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of `gulp-tape` options.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/gulp-tape
Introduced in:
0No fixed version published yet for gulp-tape (npm). Pin to a known-safe version or switch to an alternative.