Description
aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token.
Remediation
References
https://nodesecurity.io/advisories/546
Related Vulnerabilities
CVE-2017-7957 Vulnerability in maven package xstream:xstream
CVE-2020-27428 Vulnerability in npm package scratch-svg-renderer
CVE-2020-10244 Vulnerability in maven package dev.paseto:jpaseto-impl
CVE-2021-39236 Vulnerability in maven package org.apache.ozone:ozone-main
CVE-2019-0221 Vulnerability in maven package org.apache.tomcat:tomcat-catalina