Description
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.
Remediation
References
https://github.com/amireh/karma-mojo/blob/master/index.js#L100%2C
https://snyk.io/vuln/SNYK-JS-KARMAMOJO-564260
Related Vulnerabilities
CVE-2017-16144 Vulnerability in npm package myserver.alexcthomas18
CVE-2020-7681 Vulnerability in npm package marscode
CVE-2023-40826 Vulnerability in maven package org.pf4j:pf4j
CVE-2022-21169 Vulnerability in npm package express-xss-sanitizer
CVE-2020-36320 Vulnerability in maven package com.vaadin:vaadin-server