Description
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
Remediation
References
https://snyk.io/vuln/SNYK-JS-SHIBA-596466
Related Vulnerabilities
CVE-2022-36883 Vulnerability in maven package org.jenkins-ci.plugins:git
CVE-2023-22461 Vulnerability in npm package @mattkrick/sanitize-svg
CVE-2021-23771 Vulnerability in npm package argencoders-notevil
CVE-2018-3721 Vulnerability in maven package org.webjars.npm:lodash.merge
CVE-2018-8009 Vulnerability in maven package org.apache.hadoop:hadoop-common