github_osv/GHSA-9p64-h5q4-phpm
Remote Code Execution in office-converter
All versions of `office-converter` are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution.
## Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
gitlab/npm/office-converter/GMS-2020-417
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in office-converter.