github_osv/GHSA-8695-fr6h-9fq8
Command Injection in nuance-gulp-build-common
All versions of package nuance-gulp-build-common are vulnerable to Command Injection via the index.js file.
**PoC:**
```js
var a = require("nuance-gulp-build-common")
a.run("touch JHU")
```
gitlab/npm/nuance-gulp-build-common/CVE-2020-28430
All versions of package nuance-gulp-build-common are vulnerable to Command Injection via the index.js file.