Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-7607

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-h33p-5j96-w8qh

OS Command Injection in gulkp-styledocco gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument `options` of the exports function in `index.js` can be controlled by users without any sanitization.

gitlab/npm/gulp-styledocco/CVE-2020-7607

Injection Vulnerability gulp-styledocco allows execution of arbitrary OS commands. The `options` argument of the exports function in `index.js` can be controlled by users without any sanitization.