Description
This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-SONARWRAPPER-1050980
Related Vulnerabilities
CVE-2021-26073 Vulnerability in npm package atlassian-connect-express
CVE-2021-35065 Vulnerability in npm package glob-parent
CVE-2023-35165 Vulnerability in npm package @aws-cdk/aws-eks
CVE-2010-1330 Vulnerability in maven package org.jruby.jcodings:jcodings
CVE-2015-8031 Vulnerability in maven package org.jvnet.hudson.main:hudson-core