Description
The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
Remediation
References
https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de
https://www.npmjs.com/package/%40rkesters/gnuplot
Related Vulnerabilities
CVE-2023-48292 Vulnerability in maven package org.xwiki.contrib:xwiki-application-admintools
CVE-2022-22947 Vulnerability in maven package org.springframework.cloud:spring-cloud-gateway
CVE-2020-28462 Vulnerability in npm package ion-parser
CVE-2020-9488 Vulnerability in maven package org.apache.logging.log4j:log4j
CVE-2021-28169 Vulnerability in maven package org.eclipse.jetty:jetty-servlets