Description
A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.
Remediation
References
https://hackerone.com/reports/863544
Related Vulnerabilities
CVE-2023-3691 Vulnerability in npm package layui
CVE-2021-21428 Vulnerability in maven package org.openapitools:openapi-generator-online
CVE-2019-19466 Vulnerability in npm package sceditor
CVE-2020-10991 Vulnerability in maven package org.mule.modules:mule-module-apikit
CVE-2022-36077 Vulnerability in maven package org.webjars.npm:electron