← Back to CVE List

CVE-2022-21186

Published: 2022-08-05T05:15Z
Last Modified: 2024-11-21T06:44Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt