GHSA-f2jw-pr2c-9x96
Code injection in @rkesters/gnuplot
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @rkesters/gnuplot | < 0.1.1 | 0.1.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
References
External links from the advisory. They lead to third-party sites.