Description
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
Remediation
References
https://snyk.io/vuln/SNYK-JS-SHIBA-596466
Related Vulnerabilities
CVE-2019-17592 Vulnerability in maven package org.webjars.npm:csv-parse
CVE-2020-7630 Vulnerability in npm package git-add-remote
CVE-2018-14627 Vulnerability in maven package org.wildfly:wildfly-feature-pack
CVE-2016-15025 Vulnerability in npm package generator-hottowel
CVE-2023-42795 Vulnerability in maven package org.apache.tomcat:tomcat