npm/@cyclonedx/cdxgen: medium
@cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths
Action: Upgrade @cyclonedx/cdxgen to 12.4.3 or later.
npm i @cyclonedx/cdxgen@12.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.4.3 | - |
Fixed versions
| 12.4.3 |
Sources
- osv: GHSA-5vwr-qchf-q4pf
- https://github.com/cdxgen/cdxgen/security/advisories/GHSA-5vwr-qchf-q4pf
- https://github.com/cdxgen/cdxgen/pull/4059
- https://github.com/cdxgen/cdxgen
published · modified · JSON