Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-qc22-qwm9-j8rx

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qc22-qwm9-j8rx

Remote Code Execution in npm-groovy-lint Versions of npm-groovy-lint prior to 9.1.0 bundle vulnerable versions of the Log4j library which are subject to remote code execution via jndi rendering. As a result npm-groovy-lint prior to 9.1.0 is also vulnerable.

gitlab/npm/npm-groovy-lint/GMS-2021-40

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in npm-groovy-lint.