Description
An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Remediation
References
https://github.com/shenzhim/aaptjs/issues/2
Related Vulnerabilities
CVE-2021-4307 Vulnerability in npm package baobab
CVE-2021-40525 Vulnerability in maven package org.apache.james:james-server
CVE-2021-21320 Vulnerability in npm package matrix-react-sdk
CVE-2020-27216 Vulnerability in maven package jetty:jetty
CVE-2021-29444 Vulnerability in npm package jose-browser-runtime