Description
A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.
Remediation
References
https://hackerone.com/reports/863544
Related Vulnerabilities
CVE-2022-25844 Vulnerability in npm package angular
CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-record-serialization-services
CVE-2022-40149 Vulnerability in maven package org.codehaus.jettison:jettison
CVE-2021-21351 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2020-21122 Vulnerability in maven package com.bstek.ureport:ureport2-console