Injection Vulnerability
gulp-scss-lint allows execution of arbitrary commands. It is possible to inject arbitrary commands to the exec function located in src/command.js via the provided options.
Advisories for Npm/Gulp-Scss-Lint package
2020
gulp-scss-lint allows execution of arbitrary commands. It is possible to inject arbitrary commands to the exec function located in src/command.js via the provided options.