~ / search / GHSA-32fw-9wq8-9x9c

GHSA-32fw-9wq8-9x9c

node-latex-pdf is susceptible to command injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-28433

Packages

EcosystemPackageAffectedFixed in
npm node-latex-pdf <= 0.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A command injection vulnerability affects all versions of the package node-latex-pdf.

References

External links from the advisory. They lead to third-party sites.