Description
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options.
Remediation
References
https://snyk.io/vuln/SNYK-JS-GULPTAPE-560124
Related Vulnerabilities
CVE-2021-21345 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2021-21304 Vulnerability in npm package dynamoose
CVE-2016-10540 Vulnerability in maven package org.webjars:minimatch
CVE-2022-47105 Vulnerability in maven package org.jeecgframework.boot:jeecg-module-system
CVE-2020-19698 Vulnerability in maven package org.webjars.bowergithub.pandao:editor.md