Description
A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.
Remediation
References
https://hackerone.com/reports/863544
Related Vulnerabilities
CVE-2022-0265 Vulnerability in maven package com.hazelcast:hazelcast
CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-widget
CVE-2021-4245 Vulnerability in maven package org.webjars.npm:rfc6902
CVE-2022-25848 Vulnerability in npm package static-dev-server
CVE-2022-1291 Vulnerability in maven package org.webjars.bower:tableexport.jquery.plugin