GMS-2020-331: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

November 12, 2020

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in json-logic-js.

References

github.com/advisories/GHSA-m9hw-7xfv-wqg7
github.com/jwadhams/json-logic-js/commit/fadfa5dc7ccd1cc5c9a1900a97a15af390bf642b
www.npmjs.com/advisories/1542
www.npmjs.com/package/json-logic-js

Detect and mitigate GMS-2020-331 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →