Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-9p64-h5q4-phpm

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-9p64-h5q4-phpm

Remote Code Execution in office-converter All versions of `office-converter` are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution. ## Recommendation No fix is currently available. Consider using an alternative module until a fix is made available.

gitlab/npm/office-converter/GMS-2020-417

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in office-converter.