GHSA-gp2j-mg4w-2rh5
chrome-launcher subject to OS Command Injection
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | chrome-launcher | < 0.13.2 | 0.13.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
chrome-launcher prior to 0.13.2 is subject to OS Command Injection via the `$HOME` environment variable in Linux operating systems. This issue is patched in version 0.13.2.
References
External links from the advisory. They lead to third-party sites.