Description
The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
Remediation
References
https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de
https://www.npmjs.com/package/%40rkesters/gnuplot
Related Vulnerabilities
CVE-2022-39263 Vulnerability in npm package next-auth
CVE-2019-10383 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2017-12617 Vulnerability in maven package org.apache.tomcat:tomcat-util
CVE-2022-43432 Vulnerability in maven package org.jenkins-ci.plugins:xframium
CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core-war