Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
broccoli-compass v0.2.4 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.
Advisories for Npm/Broccoli-Compass package
2023