~ / search / GHSA-ww4j-c2rq-47q8

GHSA-ww4j-c2rq-47q8

Command injection in ts-process-promises

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-7784

Packages

EcosystemPackageAffectedFixed in
npm ts-process-promises 1.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js.

References

External links from the advisory. They lead to third-party sites.