Description
aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token.
Remediation
References
https://nodesecurity.io/advisories/546
Related Vulnerabilities
CVE-2020-5263 Vulnerability in maven package org.webjars.npm:auth0-js
CVE-2016-10589 Vulnerability in npm package selenium-binaries
CVE-2019-10353 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2016-4567 Vulnerability in npm package mediaelement
CVE-2022-38900 Vulnerability in maven package org.webjars.npm:decode-uri-component