Description
An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.
Remediation
References
https://hackerone.com/reports/660563
Related Vulnerabilities
CVE-2021-23490 Vulnerability in npm package parse-link-header
CVE-2021-40660 Vulnerability in maven package org.javadelight:delight-nashorn-sandbox
CVE-2022-22984 Vulnerability in npm package snyk-docker-plugin
CVE-2021-43142 Vulnerability in maven package com.wutka:jox
CVE-2023-27025 Vulnerability in maven package com.ruoyi:ruoyi-quartz