Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-7603

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-m647-5wf9-3jp3

OS Command Injection in closure-compiler-stream closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument `options` of the exports function in `index.js` can be controlled by users without any sanitization.

gitlab/npm/closure-compiler-stream/CVE-2020-7603

Injection Vulnerability closure-compiler-stream allows execution of arbitrary commands. The argument `options` of the exports function in `index.js` can be controlled by users without any sanitization.