Описание
Command injection in spritesheet-js
This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package.
Пакеты
Наименование
spritesheet-js
npm
Затронутые версииВерсия исправления
<= 1.2.6
Отсутствует
Связанные уязвимости
CVSS3: 9.8
nvd
почти 5 лет назад
This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package.