Description
All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems.
Remediation
References
http://snyk.io/vuln/SNYK-JS-CHROMELAUNCHER-537575
Related Vulnerabilities
CVE-2020-7720 Vulnerability in maven package org.webjars.npm:node-forge
CVE-2020-14968 Vulnerability in maven package org.webjars.npm:jsrsasign
CVE-2022-24999 Vulnerability in maven package org.webjars.bower:qs
CVE-2022-32114 Vulnerability in npm package @strapi/strapi
CVE-2022-36884 Vulnerability in maven package org.jenkins-ci.plugins:git