github_osv/GHSA-x67x-98x7-wv26
OS Command Injection in gulp-tape
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of `gulp-tape` options.
gitlab/npm/gulp-tape/CVE-2020-7605
Injection Vulnerability
It is possible to inject arbitrary OS commands by passing them into `gulp-tape` options.