github_osv/GHSA-795w-7426-m94j
stoqey/gnuplot is vulnerable to command injection
An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, child_process, and/or filePath parameter(s).
gitlab/npm/@stoqey/gnuplot/CVE-2021-33360
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, child_process, and/or filePath parameter(s).